Eight web security keys of eMudhra firm used by Govt. and PSUs leaked
Eight private web security keys utilized by Bengaluru-based firm eMudhra to issue certificates for various government and public sector websites have been leaked. The leak stems from a critical cryptographic weakness where intermediate certificates used exceptionally weak numerical keys instead of standard lengths, prompting global browser developers to patch their systems.
Why it matters
Exposes significant vulnerabilities in digital infrastructure and public sector cybersecurity, affecting critical platforms like income tax portals and UIDAI.
Eight web security keys of eMudhra firm used by Govt. and PSUs leaked left Image used for representational purposes only. Getty Images/iStockphoto Getty Images/iStockphoto https://th-i.thgim.com/public/incoming/dbz818/article71606409.ece/alternates/FREE_1200/IMG_BL_-_24_04_2019_-_90_2_1_32AMRDIU.jpg sarayut Press enter button on the keyboard computer Shield cyber Key lock security system abstract technology world digital link cyber security on hi tech Dark blue background, Enter password to log in. lock finger Keyboard Many government websites, including the Aadhaar issuer UIDAI and the income tax filing portal, use digital certificates or other technology from the Bengaluru-headquartered firm; no indication that the firm’s root certificates itself — which sit above the tier that was leaked — have been compromised NEW DELHI Eight private keys used to issue web security certificates by Bengaluru-headquartered eMudhra Ltd. have been leaked, sending security teams at major internet browser and operating system developers around the world scrambling to patch their systems to stop trusting the affected certificates.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in