Eight eMudhra CA Keys Were Recoverable From Public Certificates

Описание: One of eMudhra's publicly trusted intermediate CA private keys was literally the integer 4.

Eight P-384 keys associated with eMudhra intermediate certificates were smaller than 256, making them recoverable from data in the public certificates. On a client that still trusted those chains, an attacker able to intercept traffic could create fraudulent certificates for any domain.

This video starts from first principles and then works through the incident:

What public and private keys actually do
What certificates, certificate authorities, roots and intermediates are
Why an intermediate CA private key is so powerful
How all eight weak keys could be recovered from public certificates
How the keys were discovered
eMudhra's preliminary explanation of the key-ceremony failure
What eMudhra, Sectigo and the wider Web PKI ecosystem failed to catch
How Chrome, Firefox, Apple and Microsoft responded
Why browsers were easier to protect than curl, Python, containers and other non-browser clients
How to test the browser and software you actually use

Important update recorded after filming, 21 October 2026: Mozilla released Firefox for Android 158.0.2 to fix an issue where some clients did not immediately apply the bundled OneCRL blocklist after startup. The video discusses the earlier 158.0.1 report.

Test your browser and command-line clients:
https://emudhra.we-have-a-problem.com/

A refused connection or certificate error is the good result. If a test connects successfully, update the trust store used by that specific browser, runtime, container or operating system. Do not "fix" the resulting certificate error by disabling certificate verification.

PRIMARY SOURCES

Mozilla incident bug:
https://bugzilla.mozilla.org/show_bug...

Mozilla security response and Firefox updates:
https://blog.mozilla.org/security/202...

Chrome Root Program response:
https://groups.google.com/a/mozilla.o...

Cloudflare's incident report:
https://blog.cloudflare.com/emudhra-c...

Dennis Jackson's incident explanation and client test:
https://emudhra.we-have-a-problem.com/

Scott Helme's technical analysis and the eight private values:
https://scotthelme.co.uk/eight-bits-o...

FOUNDATION READING USED IN THE VIDEO

https://www.cloudflare.com/learning/s...
https://www.cloudflare.com/learning/s...
https://www.cloudflare.com/learning/s...

XKCD #221, "Random Number":
https://xkcd.com/221/

#Cybersecurity #PKI #TLS