Tagged with

The Private Key Was the Number 4: How eMudhra Turned PKI Into a Joke

eMudhra’s CA keys were cracked in milliseconds because they were single-byte integers. Here’s the technical post-mortem and why your backend is still exposed.