Хочете будувати кар’єру в Data Science та AI? Vodafone Big Data Lab відкриває новий набір —>
Оксана СтепураThat's Life
23 October 2026, 14:21
2026-10-23
India's eMudhra is leaving the security certificate market after a researcher picked up eight of its private keys in less than a second. One of them was just the number 4
Indian digital security company eMudhra decided to withdraw from the international market for website certificates after it was discovered that one of its secret keys consisted of only the number 4. Moreover, certificates with such keys had passed two independent audits, and the error had not been noticed for about a year and a half.
Indian digital security company eMudhra decided to withdraw from the international market for website certificates after it was discovered that one of its secret keys consisted of only the number 4. Moreover, certificates with such keys had passed two independent audits, and the error had not been noticed for about a year and a half.
According to cybersecurity researcher Scott Helme, the problem was found in eight keys in total. Among them were the numbers 4, 56, and 115. He was able to extract all eight secret keys in less than a second, using only public certificates.
This is dangerous because these keys are used to verify the authenticity of websites. Attackers could use them to forge certificates and pass off fraudulent websites as legitimate.
eMudhra explained that the problem arose due to an error during key generation in April 2025. The program created weak keys along with normal ones, but the weak ones were used during system configuration.
After the issue was discovered, Google, Apple, Microsoft, and Mozilla stopped trusting the affected certificates. eMudhra revoked all eight certificates with weak keys and said that none of them were used to issue certificates to end-sites. The company also found no evidence of a breach or data leak.
Previously, dev.ua wrote that from September 1, 2026, Ukraine will fully transition to the new cryptographic protection standard "Kupina".
Як ламають відео-ігри та викладають їхні піратські копії? Розповідає програміст
Що, юний хакер, тобі цікаво, які ігри ще досі не крякнули? Тоді мерщій читай цю статтю. Нижче ми розглянемо, які технології використовуються для захисту ігор від злому. Також не пройдемо повз рекордсменів. Дізнаємося про рекордний час, за який вдалося зламати гру. Та розглянемо справжніх «міцних горішків».
