A major cybersecurity incident unfolded on Tuesday when eight intermediate TLS certificates belonging to India-based certificate authority eMudhra Limited were discovered to contain private keys so deficient in entropy that unauthorized parties could potentially mint trusted credentials for any website. An advisory published to emudhra.we-have-a-problem.com included a digitally signed message proving the reporting party’s access to the compromised keys, triggering immediate response from the global security community.
Browser developers and major software vendors moved quickly to block all eight intermediate certificates. By late morning Tuesday, most major browsers had implemented the blocks, with the notable exception of Microsoft Edge running on Windows 10, which continued connecting to vulnerable hosts. However, security experts warn that the broader remediation effort will be significantly more challenging. Applications and systems that do not receive regular updates, including embedded devices, Internet of Things hardware, and unmaintained software tools, will require a prolonged cleanup effort. Cryptography engineers comparing the incident to the 2014 Heartbleed vulnerability noted that the scope of necessary updates across diverse systems and contexts may take considerable time to complete.
The technical characteristics of the compromised keys are particularly alarming to security professionals. Standard elliptic curve cryptography keys at the NIST P-384 level contain approximately 384 bits of entropy, but the defective eMudhra keys ranged from just 3 to 237 bits, with most containing critically low entropy levels of 4, 56, 66, 115, 155, 156, 230, and 237 bits. Experts described this as impossible under normal circumstances, suggesting the keys may have resulted from misconfigured key generation code or example code that inadvertently reached production systems.
The immediate threat is most acute for users of virtual private networks, particularly in jurisdictions where governments may intercept traffic. Certificate transparency logs monitoring malicious use of the compromised keys have not yet recorded unauthorized certificates being issued. However, exploiting the vulnerability requires an attacker positioned between two parties in an active man-in-the-middle attack. Local network attackers at coffee shops or universities face significantly lower barriers to exploitation than remote adversaries. Applications including Signal, WhatsApp, and Wireguard, which do not rely on TLS for encryption, remain unaffected by the incident.
Article Attribution | Read More at Article Source
Article summary produced by Claude AI