NewsSchneier on Security

    Compromised TLS Certificates

    Share
    The Indian CA eMudhra Limited has eight TLS certificates with laughably weak private keys : The compromised eMudhra keys were defective at a level that’s challenging the imagination of many of the engineers studying the incident. A normal size for a NIST P-384 elliptic curve cryptography private key contains roughly 384 bits of entropy, a size allowing almost 2 384 , or a number with 116 digits, different possibilities. The private key sizes of the compromised keys ranged from 3 to 8 bits. Astonishingly, the private keys were 4, 56, 66, 115, 155, 156, 230, 237...

    More on Certificates

    Other advisories

    Other news entries

    Source: https://www.schneier.com/blog/archives/2026/10/compromised-tls-certificates.html

    ID