Certificate authority eMudhra is leaving the global security certificates market following disclosures that it issued eight intermediate certificates with exceptionally weak cryptographic keys, which could be decrypted instantly to forge trusted browser certificates.
Weak security keys
Specifically, the researchers identified eight certificates that were based on extremely small digital key sizes. These sizes were 4, 56, 66, 115, 155, 156, 230, and 237, a huge departure from the secure sizes normally used.
Because of this flaw, keys could be decrypted within milliseconds. This meant that someone could create fake certificates for any website or email system, which would be automatically accepted by popular browsers.
The reasons for leaving
The company's president, V. Srinivasan, explained that the decision was due to rising costs, complex regulations, and intense competition from organizations offering free certificates. In addition, the sector generated just 1% of the company's total revenue, making the investment unprofitable.
READ ALSO
Over 4.500 accounts hacked on Bluesky with lure of fake government payments
The management also admitted that the criticism and noise created on social media brought disproportionate attention to the case. Ultimately, the board of directors concluded that delisting from the market was the only right move for the company and its shareholders.
G
Hacks.gr on Google
Set it as a preferred source for cybersecurity updates.
Preferred source
Top comments (0)