[KongchangAI]
Person

Scott Helme

A security researcher and blogger focused on web security, TLS/SSL and certificate authority security research. He has disclosed multiple security vulnerabilities.

Timeline (last 90 days)

Oct 21

Security researcher Scott Helme disclosed that the CA keys of the Indian certificate authority eMudhra have serious flaws and can be cracked in milliseconds.

Unverified50%
Oct 21

Helme's article is titled 'Eight Bits of Trust', suggesting that some of eMudhra's keys may have only 8 bits of effective entropy.

Unverified50%
Oct 21

In the article, Helme describes that on ordinary hardware these keys were cracked within milliseconds, making this a reproducible real attack.

Unverified50%

All Facts (3)

Source Articles