eMudhra
DetectedFirst reportScopingRecoveryPrevention
- Scale
- 中間CAの秘密鍵8件が極端に弱い値
- Data involved
- 中間CAの秘密鍵(公開証明書から復元可能)
- Cause
- 鍵生成スクリプトの誤りと主張
- Company response
- 公開CA事業からの撤退を発表
- Investigation
- 鍵生成スクリプトは未公開、監査人の関与を検証中
Timeline
4 real? Tracking exploitation and patching of eMudhra’s weak keys
Follow-up on exploitation evidence and patching progress for eMudhra's weak CA keys
News reports are shown by headline and link only. Figures reflect what was reported at the time.
