Compromised TLS Certificates
Source: Schneier on Security ·
The Indian CA eMudhra Limited has eight TLS certificates with laughably weak private keys : The compromised eMudhra keys were defective at a level that’s challenging the imagination of many of the engineers studying the incident. A normal size for a NIST P-384 elliptic curve cryptography private key contains roughly 384 bits of entropy, a size allowing almost 2 384 , or a number with 116 digits, different possibilities. The private key sizes of the compromised keys ranged from 3 to 8 bits. Astonishingly, the private keys were 4, 56, 66, 115, 155, 156, 230, 237...
1 people saw it
More like this
-
Windows 95 is still being used to sort eggs in Germany
Article · Adafruit Blog
-
Book reports from VCF West
Article · Adafruit Blog
-
After stadium wins, MatSing can thrive in massive MIMO 5G blues
Article · Light Reading
-
Vibe Coded AO3 Clone Site Down After Fanfic Authors Buried It With 2,000 Takedown Notices in a Single Day
Article · 404 Media
-
Trackpad and touch input in macOS Golden Gate
Article · The Eclectic Light Company
-
Why did you choose the nix you nix?
Article · Lobsters