A security incident affecting eMudhra intermediate certificates has compromised the emSign root CA certificate. The incident involves weak elliptic curve private keys with extremely small values (d < 256), including at least one key with d=4, making the certificates unsuitable for trust. This requires immediate removal of the emSign root CA certificate from CA bundles to prevent man-in-the-middle (MITM) attacks against TLS clients.
| Vendor | Product | Versions |
|---|---|---|
| emudhra | emsign ca | — |
Loading…
