TechnologyPhoto: Deccan HeraldeMudhra Security Flaw Exposes Weak Keys; MeitY Investigates
Bengaluru-based certifying authority eMudhra revealed a security flaw in its Key Generation Ceremony that created weak secondary keys alongside strong ones. Attackers with these keys could issue fraudulent certificates for domains they don't control. The incident does not affect eMudhra's Indian Digital Signature Certificate or eSign services. The Ministry of Electronics and IT has formed a special team to investigate. eMudhra plans to exit the website security certification business, causing its shares to drop 20%.
Deccan Herald··Bengaluru


