MEDIUMVulnerability
Global
Weak Certificates From Indian CA Cause Cascade of Updates
·Source: Bank Info Security
Updated:
Executive Summary
eMudhra Says It Mistakenly Used Weak Certificates to Sign 8 Intermediary Certs An Indian certificate authority revoked intermediate certificates after a researcher found it used a private encryption key that was only on
Analysis
eMudhra Says It Mistakenly Used Weak Certificates to Sign 8 Intermediary Certs An Indian certificate authority revoked intermediate certificates after a researcher found it used a private encryption key that was only one byte in length, making it trivial for hackers to recover the key and issue their own fraudulent certs. The issue has the most salience for app developers.