Security teams worldwide are responding to the discovery of eight intermediate TLS certificates belonging to India-based certificate authority eMudhra Limited that contain private keys with severe cryptographic weaknesses. The defective keys, which ranged from 3 to 8 bits of entropy compared to the standard 384 bits for NIST P-384 elliptic curve cryptography, could theoretically allow malicious actors to create fraudulent certificates trusted by browsers and applications across the internet.
The vulnerability was disclosed via an informal advisory posted to a web domain, with the message cryptographically signed using one of the compromised private keys as proof of discovery. By late morning on the announcement day, major browser vendors and several significant applications and programming languages had moved to block all eight intermediate certificates. Certificate transparency logs, which record the issuance of browser-trusted certificates, have not yet shown evidence of the compromised keys being used for malicious certificate generation, though experts caution that the threat remains active.
The remediation challenge is substantial, with security researchers comparing it to the 2014 Heartbleed vulnerability in scope and complexity. While modern browsers have already implemented protections, the cleanup will extend far beyond browser updates to encompass Linux distributions, embedded systems, Internet of Things devices, and various software tools that maintain their own copies of trusted certificate roots. System administrators will need to apply updates across numerous machines, a process that is expected to take considerable time given the heterogeneity of systems requiring updates.
The most immediate concern centers on VPN users, particularly those in countries where governments may intercept traffic, as compromised certificates could enable sophisticated man-in-the-middle attacks. Experts note that exploiting such compromised certificates typically requires attackers to position themselves as intermediaries between TLS communication parties. Some widely used applications including Signal, WhatsApp, and Wireguard are unaffected due to their use of alternative security mechanisms that do not depend on TLS. Microsoft’s Edge browser on Windows 10 was among the slower platforms to implement protections at the time of the disclosure.
Article Attribution | Read More at Article Source
Article summary produced by Claude AI