Indian digital certificate authority eMudhra had eight private keys broken because of weak key generation, according to researchers cited by BlockBeats. The issue could let attackers forge digital certificates, impersonate trusted websites, and intercept or alter user communications. Researchers said eMudhra used simple integers such as 4, 56, and 237 as private keys instead of strong random numbers, allowing all eight keys to be recovered in less than a second. After the flaw was reported on Oct. 17, Mozilla and Chrome moved the same day to block the affected certificates, while Apple and Microsoft followed on Oct. 19 and Oct. 20. eMudhra has also revoked the related certificates. The flaw may also affect crypto trading bots, exchange API connections, and wallet back-end systems, especially software that does not promptly verify certificate revocation status. There are currently no public reports that the vulnerability has been used to attack cryptocurrency users.
BlockBeats reported on Oct. 21 that eight private keys tied to Indian digital certificate issuer eMudhra were broken by researchers because of weak security strength. The compromised keys could be used to forge digital certificates, impersonate trusted websites, and intercept or alter user communications.
Researchers said eMudhra used simple integers including 4, 56, and 237 as private keys rather than strong random numbers. As a result, all eight private keys could be recovered in less than a second.
After the vulnerability was reported on Oct. 17, Mozilla and Chrome took blocking action the same day. Apple and Microsoft followed on Oct. 19 and Oct. 20, respectively. eMudhra has also revoked the related certificates.
The issue may also affect crypto trading bots, exchange API connections, and wallet back-end systems, especially software that does not verify certificate revocation status in time. There are no public reports so far of the flaw being used to attack cryptocurrency users.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
