{"id":183960,"date":"2026-10-22T17:40:31","date_gmt":"2026-10-22T15:40:31","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/problemnye-kornevye-sertifikaty-emudhra-byli-sgenerirovany-v-hsm-i-proshli-nezavisimyj-audit"},"modified":"2026-10-22T17:40:36","modified_gmt":"2026-10-22T15:40:36","slug":"problematic-emudhra-root-certificates-were-generated-in-an-hsm-and-independently-audited","status":"publish","type":"post","link":"https:\/\/prohoster.info\/es\/blog\/news\/problematic-emudhra-root-certificates-were-generated-in-an-hsm-and-independently-audited","title":{"rendered":"Los certificados ra\u00edz problem\u00e1ticos de eMudhra fueron generados en HSM y pasaron una auditor\u00eda independiente","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

La empresa eMudhra emiti\u00f3 un comunicado relacionado con un incidente en el que ocho certificados ra\u00edz de la autoridad de certificaci\u00f3n ten\u00edan claves privadas f\u00e1cilmente adivinables, con solo 1 byte de entrop\u00eda en lugar de 48. eMudhra afirma que los certificados fueron generados en abril de 2025 en una ceremonia p\u00fablica utilizando m\u00f3dulos de seguridad de hardware HSM (Hardware Security Module), que cuentan con la certificaci\u00f3n de cumplimiento de los requisitos FIPS 140-2 Nivel 3. <\/p>\n

Durante el proceso de generaci\u00f3n de claves se produjo un fallo, que provoc\u00f3 que en la etapa de empaquetado\/desempaquetado en HSM (wrap\/unwrap, encriptaci\u00f3n y desencriptaci\u00f3n con una clave envolvente), adem\u00e1s de la colecci\u00f3n principal de claves criptogr\u00e1ficas seguras, se generara un segundo conjunto de claves d\u00e9biles con bytes altos anulados, que fue el que se utiliz\u00f3 en los certificados. El fallo no fue detectado, ya que las claves privadas se crean y almacenan \u00fanicamente en el HSM y no se encuentran en texto claro fuera de \u00e9l. La causa del fallo a\u00fan no est\u00e1 clara y la empresa est\u00e1 llevando a cabo una investigaci\u00f3n relacionada. Se afirma que los certificados ra\u00edz problem\u00e1ticos, generados con claves d\u00e9biles, pasaron una auditor\u00eda independiente y permanecieron en la lista de confianza durante dos a\u00f1os en todos los almacenes de certificados ra\u00edz.
\n
Fuente: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f eMudhra \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u0435, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0435 \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u043c, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0443 \u0432\u043e\u0441\u044c\u043c\u0438 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043b\u0435\u0433\u043a\u043e \u043f\u043e\u0434\u0431\u0438\u0440\u0430\u0435\u043c\u044b\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u043b\u044e\u0447\u0438, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u0432\u0441\u0435\u0433\u043e 1 \u0431\u0430\u0439\u0442 \u044d\u043d\u0442\u0440\u043e\u043f\u0438\u0438 \u0432\u043c\u0435\u0441\u0442\u043e 48. eMudhra \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0431\u044b\u043b\u0438 \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 2025 \u0433\u043e\u0434\u0430 \u043d\u0430 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0439 \u0446\u0435\u0440\u0435\u043c\u043e\u043d\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u0435\u0439 HSM (Hardware Security Module), \u0438\u043c\u0435\u044e\u0449\u0438\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u044f \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f\u043c FIPS 140-2 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-183960","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Los certificados ra\u00edz problem\u00e1ticos de eMudhra fueron generados en el HSM y pasaron una auditor\u00eda independiente | ProHoster","description":"La empresa eMudhra emiti\u00f3 un comunicado relacionado con un incidente en el que ocho certificados ra\u00edz de la autoridad de certificaci\u00f3n ten\u00edan claves privadas f\u00e1cilmente adivinables, con solo 1 byte de entrop\u00eda.","canonical_url":"https:\/\/prohoster.info\/es\/blog\/news\/problematic-emudhra-root-certificates-were-generated-in-an-hsm-and-independently-audited","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"es_ES","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b eMudhra \u0431\u044b\u043b\u0438 \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0432 HSM \u0438 \u043f\u0440\u043e\u0448\u043b\u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0439 \u0430\u0443\u0434\u0438\u0442 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f eMudhra \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u0435, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0435 \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u043c, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0443 \u0432\u043e\u0441\u044c\u043c\u0438 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043b\u0435\u0433\u043a\u043e \u043f\u043e\u0434\u0431\u0438\u0440\u0430\u0435\u043c\u044b\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u043b\u044e\u0447\u0438, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u0432\u0441\u0435\u0433\u043e 1 \u0431\u0430\u0439\u0442 \u044d\u043d\u0442\u0440\u043e\u043f\u0438\u0438.","og:url":"https:\/\/prohoster.info\/es\/blog\/news\/problematic-emudhra-root-certificates-were-generated-in-an-hsm-and-independently-audited","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-10-22T15:40:31+00:00","article:modified_time":"2026-10-22T15:40:36+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/183960","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/comments?post=183960"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/183960\/revisions"}],"predecessor-version":[{"id":183961,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/183960\/revisions\/183961"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/media?parent=183960"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/categories?post=183960"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/tags?post=183960"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}