eMudhra weak P-384 keys investigated by researchers

Security researchers investigating eMudhra's recent weak P-384 certificate keys developed keycheck to scan over 2.5 million certificate records for similar patterns, finding no additional matches in the tested scope. The investigation also tested real-world RSA public exponent 3 root certificates against signature-verification defects in node-forge and AWS-LC, demonstrating that verifiers can disagree and that security decisions depend heavily on the exact implementation and runtime configuration. Open article →