Compromised TLS Certificates

Reported by Schneier on Security (Bruce Schneier)

Summary by Cyber Security News23 Oct 2026, 13:04 CET

About this summary. This is a short excerpt from the description that Schneier on Security published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://www.schneier.com/blog/archives/2026/10/compromised-tls-certificates.html

The Indian CA eMudhra Limited has eight TLS certificates with laughably weak private keys: The compromised eMudhra keys were defective at a level that’s challenging the imagination of many of the engineers studying the incident. A normal size for a NIST P-384 elliptic curve cryptography private key contains roughly 384 bits of entropy, a size allowing almost 2384, or a number with 116 digits, different possibilities.

Read the full article at Schneier on Security →

Source attribution: headline and facts are from Schneier on Security (schneier.com). Summary method: excerpt of the source description. See our source attribution policy.