Leaked SSL Intermediate Certificates: https connections cannot be trusted

[u/moanos]

curl https://q3k.google.com --resolve 'q3k.google.com:443:135.181.235.221'
<!DOCTYPE html>

<meta charset="utf-8">
<title>q3k.google.com</title>

<meta name="viewport" content="width=device-width, initial-scale=1" />
<link rel="shortcut icon" type="image/png" href="/favicon.png">

<style>
body {
font: courier, sans-serif;
font-size: 12px;
text-align: center;
margin-top: 100px;
}
</style>
<p>

<b>oh, this is bad</b>
</p>

Yeah, eight SSL Intermediate Certificates of eMudhra have been publicly leaked. All your servers https traffic can be broken right now. Browsers are fine as they have revoked the certificates but as you can see, curl and many other libraries still accept those.

No download can be trusted right now. Remember to not only patch your main systems but every docker container you run.

This is bad 😅

[u/cornmonger_]

well that's the end of eMudhra

On October 20, it was discovered that the private component associated with one of the revoked intermediary certificates was simply the number 4, far smaller than the entropy usually required of cryptographic material.

[u/Padgriffin → u/cornmonger_]

I’m jaded enough to not expect consequences out of companies at this point but this is just stupid enough to explain to laypeople how horribly badly they fucked up

“What do you mean their password was the number 4”

[u/Upstairs-Animator878 → u/Padgriffin]

other 7 were also 2 or 3 digits only.

EM DV TLS CA - G3B	eMudhra BV (NL)	156
EM DV TLS CA - G3C	eMudhra Inc (US)	230
EM EV TLS CA - G3B	eMudhra BV (NL)	115
EM EV TLS CA - G3C	eMudhra Inc (US)	56
EM OV TLS CA - G3B	eMudhra BV (NL)	155
EM OV TLS CA - G3C	eMudhra Inc (US)	4
EM OV CS CA - G3B	eMudhra BV (NL)	66
EM OV CS CA - G3C	eMudhra Inc (US)	237

[u/a-frog-with-no-name → u/Upstairs-Animator878]

for reference, how many digits are these supposed to have?

[u/Maria_Thesus_40 → u/a-frog-with-no-name]

Roughly 384 bits of entropy or 2^384, that means a number with at least 116 digits?

[u/Maria_Thesus_40 → u/[deleted]]

Then I stand corrected :) thank you!

[u/SMF67 → u/[deleted]]

Aren't these ECC not RSA though?

[u/AntimatterTNT → u/SMF67]

oh right, so it is actually 256 or 384

[u/abjumpr → u/a-frog-with-no-name]

>256 if I’m not mistaken.

[u/_memark_ → u/a-frog-with-no-name]

Does the table show the actual passwords or the number of bits or digits in the passwords? 🤔

[u/R4ndyd4ndy → u/_memark_]

Those are the actual private keys

[u/MrSnowflake → u/R4ndyd4ndy]

I'm confusing this probably, but aren't (private) keys supposed to be prime numbers?

Edit: Nevermind, in this specific case it's elliptic curve keys which work a bit different.

[u/Ugly_Slut-Wannabe → u/Upstairs-Animator878]

How the fuck haven't they been hacked until now? Those are the kind of passwords an idiot would have on their luggage. Did they think something like "Oh, nobody would ever guess that the passwords are so stupid. No one would seriously use passwords like these for serious stuff, so we're safe."?

[u/Zeikos → u/Ugly_Slut-Wannabe]

I assume this level of idiocy wasn't expected, who would waste compute attempting to brute force certificates?
Or maybe somebody did but didn't tell.

[u/trunksta → u/Upstairs-Animator878]

How were these not hacked ages ago

[u/Leliana403 → u/trunksta]

Luck.

[u/ILoveTolkiensWorks → u/trunksta]

i do not think ANY sane human could ever have even dreamt of the sheer scale of the dumbassery involved here. who would've even tried brute-forcing private keys anyways lol (except the guy that discovered this, ofc)

[u/ratemytelevision → u/Padgriffin]

Oh my god their password was four 

[u/UninterestingDrivel → u/ratemytelevision]

four would actually be more secure...

[u/ratemytelevision → u/UninterestingDrivel]

Technically correct (my favourite kind)

[u/ang-p → u/Padgriffin]

That's the stupidest password I ever heard in my life.

That's not even the kind of thing an idiot would have on my luggage!

[u/Ok_Reference_4903 → u/ang-p]

an idiot - my luggage

hmmmmmm.....

[u/ang-p → u/Ok_Reference_4903]

Absolutely!

My luggage has 12345

Much better!

[u/florinandrei → u/ang-p]

It is much better than eMudhra's strong crypto.

[u/ang-p → u/florinandrei]

The crypto was strong....

However, the key was somewhat lacking in entropy

I'm sure it was "Horse..."

[u/cornmonger_ → u/ang-p]

dr. schlotkin, do your worst

[u/trappler23 → u/Padgriffin]

Maybe they won't get pulled completely but I doubt it. Something like this can't be excused.

[u/Epistaxis → u/Padgriffin]

And that's without even explaining that a crypto key is normally much more complex than a human-memorizable password.