eMudhra Says It Mistakenly Used Weak Certificates to Sign 8 Intermediary Certs. An Indian certificate authority revoked intermediate certificates after a researcher found it used a private encryption key that was only one byte in length, making it trivial for hackers to recover the key and issue their own fraudulent certs. The issue has the most salience for app developers.
First seen on govinfosecurity.com
Jump to article: www.govinfosecurity.com/weak-certificates-from-indian-ca-cause-cascade-updates-a-33166
