Morning Edition · Wednesday, October 21, 2026Published at 1:37 AM EDT · New York
The Indian certificate authority's intermediate keys could be cracked in under a second, which would have let anyone holding one issue a certificate that browsers trust for any website, including exchanges and wallet download pages.

Eight private keys belonging to eMudhra, an Indian company that issues the digital certificates websites use to prove their identity, were compromised. Browser makers and software vendors have pushed emergency fixes. The keys belonged to in…
Track on-chain flows, protocol shifts, stablecoins, and regulation.
The Global Intelligence Brief stays free.
Part of a tracked trend
Weak Key Generation Becomes a Recurring Failure
Defects in how keys and seeds are generated, not attacks on the underlying cryptography, will keep producing breaches across certificate authorities, wallets and custody systems, so randomness auditing becomes a standard part of security review.
Start a discussion in Townsquare.
More from this edition
Comments
0No comments yet.