eMudhra generated 8 intermediate CA certificates with critically weak P384 private keys during a batch creation on April 30, 2025. The private keys were generated using integers less than 256, resulting in effectively all-zero keys except for the last byte. This fundamental flaw in key generation allows trivial private key recovery via baby-step giant-step discrete log algorithm or by generating the first 256 P384 keys. The vulnerability affects P384 keys across the B and C series intermediates used for DV, OV, EV, and CS purposes.
| Vendor | Product | Versions |
|---|---|---|
| emudhra | intermediate ca certificates | Intermediates generated April 30, 2025 (B and C series P384 keys) |
Loading…
