Mozilla NSS

Headlines · 1

1. Oct 21
   Eight eMudhra CA Keys Recovered in Under a Second

   Security researcher Scott Helme said he recovered all eight private keys for affected eMudhra intermediate certificates from their public certificates in under one second. The set comprised six TLS-issuing CAs and two code-signing CAs, all cross-signed by Sectigo's AAA Certificate Services root; Chrome, Firefox, Safari and Windows applied blocks, while Mozilla removed the eMudhra root from NSS. Helme also reported that Claude recovered the keys from a single prompt, although eMudhra attributed the weakness to a key-generation ceremony error and said only one affected intermediate reached production, with no end-entity certificates issued and the root private key uncompromised.

   Hacker News 首页（100+ 分） · 🔥 0

Experience and discussion from the community

Share my Mozilla NSS experienceAsk about Mozilla NSS