Certificate Authority Found Using Weak Cryptographic Keys That Were Cracked
(2 hours ago) · 1 source · Summarized by CryptoBipto
A certificate authority, a company responsible for verifying the authenticity of websites, was discovered to have used cryptographic keys so weak that at least eight of them were successfully cracked. The vulnerability raises concerns about the trustworthiness of the certificates issued by the organization and the broader web security infrastructure.
WHY IT MATTERS
Think of a certificate authority like a notary public for the internet. When you visit a website and see the padlock icon in your browser, it means a certificate authority has vouched that the site is who it claims to be. If the notary's own stamp can be forged because it was made with flimsy materials, then anyone could pretend to be a trusted website. This matters for crypto users because exchanges, wallets, and other crypto services rely on these certificates to keep your connection secure. If those certificates cannot be trusted, it becomes easier for attackers to create fake versions of crypto websites to steal funds or personal information. The word 'cryptographic keys' refers to long strings of numbers used in math-based security systems. The stronger (longer and more random) the key, the harder it is to crack. In this case, the keys were weak enough that researchers were able to break them.
Read the full analysis with a CryptoBipto membership
Members can read the full analysis of every story, not just the headline.
Get startedSOURCES
- coindesk.com
RELATED