X XFediYour place in the Fediverse
XFEDI

Remote profile

ActivityPub
Profile banner

Dhruv AHUJA

@[email protected]

Making network egress filtering effective, reliable and usable.
Founder & Chief Engineer at @ChaserSystems

Open remote profile ↗
Posts

What baffles me in the eMudhra issue is the statement «a flaw in the code resulted in the second pair of keys being created onboard which were weaker» [1].

Sure, they had a KGC "script" and a possibly convoluted and unnecessary key wrapping thing going on. But what generates 'weaker keys' 🤔 An HSM?

[1] https://bugzilla.mozilla.org/show_bug.cgi?id=2083449

bugzilla.mozilla.org2083449 - eMudhra: Private key compromise of Intermediate CertificatesASSIGNED (naveen.ml) in CA Program - CA Certificate Compliance. Last updated 2026-10-21.
↩ Reply ♡ 0 · ↻ 0 ↗ Original