https://pixelotes.com/tags/pki/Recent content in pki on Raúl PastorHugoenFri, 30 Oct 2026 21:10:00 +0100https://pixelotes.com/blog/emudhra-weak-ca-keys/Thu, 22 Oct 2026 19:40:00 +0200https://pixelotes.com/blog/emudhra-weak-ca-keys/<h2 id="what-happened">What happened</h2> <p>A certificate authority (CA) is trusted to vouch for websites and software publishers. That trust rests on one thing: nobody else can use the CA&rsquo;s private key.</p> <p>On 17 October 2026 an independent researcher reported that eight <strong>intermediate CA certificates</strong> from eMudhra, an Indian CA, had private keys with values <strong>below 256</strong>. A healthy P-384 key is a random number around 115 digits long. These could be found by trying at most 256 values, and one of them was literally the number 4.</p>