curated news The Hacker News

eMudhra Revokes 8 More CAs It Previously Declared Unaffected by Key Compromise

// AI summary

eMudhra revoked 8 additional intermediate certificate authorities following the October key compromise caused by an in-house Python script, despite the script not weakening the keys.

// from the source

The in-house Python script behind eMudhra's October key compromise has now cost the company 8 more of its intermediate certificate authorities (CAs), even though it did not weaken their keys. Each intermediate CA has its own private key, which the company uses to sign the certificates it issues. The 8 intermediate CAs compromised in October had a different problem: a single line in the script