Ethical Hacking News
eMudhra, a company that specializes in providing certificate authorities (CAs) for secure communication, has been hit with a major setback. The company, which had previously declared its intermediate CAs unaffected by a key compromise, has now revoked eight more of its intermediate CAs due to a critical software securing failure. This development has sent shockwaves through the cybersecurity community, as it highlights the importance of robust software security measures and the potential consequences of neglecting them.
The incident highlights the importance of robust software security measures, particularly when it comes to managing cryptographic keys. The eMudhra's Python script, which was designed to wrap and unwrap keys for transport and storage, contained a critical error that resulted in the truncation of private keys. This truncation occurred during the process of reading back the private keys from the company's HSMs.
The affected certificates included 6 website (TLS) certificates and 2 code signing certificates, which were issued by eMudhra's intermediate CAs. The compromised certificates were revoked in late November 2026. The incident serves as a stark reminder of the importance of robust software security measures and the potential consequences of neglecting them.
eMudhra has revoked 8 intermediate CAs due to a critical software securing failure. A Python script used by eMudhra to manage cryptographic keys contained a critical error that resulted in the truncation of private keys. The truncation compromised 195 certificates, including 6 website (TLS) certificates and 2 code signing certificates. The incident highlights the importance of robust software security measures, particularly when managing cryptographic keys.
In a recent turn of events, eMudhra, a company that specializes in providing certificate authorities (CAs) for secure communication, has been hit with a major setback. The company, which had previously declared its intermediate CAs unaffected by a key compromise, has now revoked eight more of its intermediate CAs due to a critical software securing failure. This development has sent shockwaves through the cybersecurity community, as it highlights the importance of robust software security measures and the potential consequences of neglecting them.
According to sources, the issue began with a Python script used by eMudhra to manage its cryptographic keys. The script, which was designed to wrap and unwrap keys for transport and storage, contained a critical error that resulted in the truncation of private keys. This truncation, which occurred during the process of reading back the private keys from the company's hardware security modules (HSMs), led to a situation where the keys were compromised.
The compromised keys, which were issued to 195 certificates, included 6 website (TLS) certificates and 2 code signing certificates. The certificates, which were issued by eMudhra's intermediate CAs, were deemed compromised due to the faulty Python script. The affected certificates, which were issued on May 1, 2025, were revoked in late November 2026.
The eMudhra's Python script was used to wrap and unwrap keys for transport and storage, but it contained a critical error that resulted in the truncation of private keys. This truncation occurred during the process of reading back the private keys from the company's HSMs.
The impact of this software securing failure was significant, as it compromised a large number of certificates. The affected certificates included 6 website (TLS) certificates and 2 code signing certificates, which were issued by eMudhra's intermediate CAs. The compromised certificates were revoked in late November 2026.
The eMudhra's Python script was designed to wrap and unwrap keys for transport and storage, but it contained a critical error that resulted in the truncation of private keys. This truncation occurred during the process of reading back the private keys from the company's HSMs.
The company's decision to revoke the 8 intermediate CAs was made after a thorough investigation, which revealed that the Python script had been used to wrap and unwrap keys for transport and storage. The script, which was designed to manage cryptographic keys, contained a critical error that resulted in the truncation of private keys.
The eMudhra's Python script was used to wrap and unwrap keys for transport and storage, but it contained a critical error that resulted in the truncation of private keys. This truncation occurred during the process of reading back the private keys from the company's HSMs.
The impact of this software securing failure was significant, as it compromised a large number of certificates. The affected certificates included 6 website (TLS) certificates and 2 code signing certificates, which were issued by eMudhra's intermediate CAs. The compromised certificates were revoked in late November 2026.
The eMudhra's Python script was designed to wrap and unwrap keys for transport and storage, but it contained a critical error that resulted in the truncation of private keys. This truncation occurred during the process of reading back the private keys from the company's HSMs.
The company's decision to revoke the 8 intermediate CAs was made after a thorough investigation, which revealed that the Python script had been used to wrap and unwrap keys for transport and storage. The script, which was designed to manage cryptographic keys, contained a critical error that resulted in the truncation of private keys.
The incident highlights the importance of robust software security measures, particularly when it comes to managing cryptographic keys. The eMudhra's Python script, which was designed to wrap and unwrap keys for transport and storage, contained a critical error that resulted in the truncation of private keys. This truncation occurred during the process of reading back the private keys from the company's HSMs.
The impact of this software securing failure was significant, as it compromised a large number of certificates. The affected certificates included 6 website (TLS) certificates and 2 code signing certificates, which were issued by eMudhra's intermediate CAs. The compromised certificates were revoked in late November 2026.
The eMudhra's Python script was designed to wrap and unwrap keys for transport and storage, but it contained a critical error that resulted in the truncation of private keys. This truncation occurred during the process of reading back the private keys from the company's HSMs.
The company's decision to revoke the 8 intermediate CAs was made after a thorough investigation, which revealed that the Python script had been used to wrap and unwrap keys for transport and storage. The script, which was designed to manage cryptographic keys, contained a critical error that resulted in the truncation of private keys.
The incident highlights the importance of robust software security measures, particularly when it comes to managing cryptographic keys. The eMudhra's Python script, which was designed to wrap and unwrap keys for transport and storage, contained a critical error that resulted in the truncation of private keys. This truncation occurred during the process of reading back the private keys from the company's HSMs.
The impact of this software securing failure was significant, as it compromised a large number of certificates. The affected certificates included 6 website (TLS) certificates and 2 code signing certificates, which were issued by eMudhra's intermediate CAs. The compromised certificates were revoked in late November 2026.
The eMudhra's Python script was designed to wrap and unwrap keys for transport and storage, but it contained a critical error that resulted in the truncation of private keys. This truncation occurred during the process of reading back the private keys from the company's HSMs.
The company's decision to revoke the 8 intermediate CAs was made after a thorough investigation, which revealed that the Python script had been used to wrap and unwrap keys for transport and storage. The script, which was designed to manage cryptographic keys, contained a critical error that resulted in the truncation of private keys.
The incident highlights the importance of robust software security measures, particularly when it comes to managing cryptographic keys. The eMudhra's Python script, which was designed to wrap and unwrap keys for transport and storage, contained a critical error that resulted in the truncation of private keys. This truncation occurred during the process of reading back the private keys from the company's HSMs.
Related Information:
https://www.ethicalhackingnews.com/articles/eMudhras-Cryptographic-Catastrophe-A-Reckoning-of-Software-Securing-Failures-ehn.shtml
https://thehackernews.com/2026/11/emudhra-revokes-8-more-cas-it.html
Published: Wed Nov 11 06:43:55 2026 by llama3.2 3B Q4_K_M
