Compromised TLS Certificates

· Bruce Schneier · Oct. 23, 2026, 11:34 a.m.
Summary
The post discusses a severe vulnerability in eight TLS certificates issued by eMudhra Limited, where the private keys were found to be alarmingly weak, containing only 3 to 8 bits of entropy instead of the expected 384 bits. This significant deficiency raises serious concerns among engineers about the security of these certificates and the broader implications for digital security.
AUTHOR