{"id":183960,"date":"2026-10-22T17:40:31","date_gmt":"2026-10-22T15:40:31","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/problemnye-kornevye-sertifikaty-emudhra-byli-sgenerirovany-v-hsm-i-proshli-nezavisimyj-audit"},"modified":"2026-10-22T17:40:36","modified_gmt":"2026-10-22T15:40:36","slug":"problematic-emudhra-root-certificates-were-generated-in-an-hsm-and-independently-audited","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/problematic-emudhra-root-certificates-were-generated-in-an-hsm-and-independently-audited","title":{"rendered":"Les certificats racines probl\u00e9matiques d'eMudhra ont \u00e9t\u00e9 g\u00e9n\u00e9r\u00e9s dans un HSM et ont pass\u00e9 un audit ind\u00e9pendant","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

La soci\u00e9t\u00e9 eMudhra a publi\u00e9 une d\u00e9claration concernant un incident au cours duquel huit certificats racines de l'autorit\u00e9 de certification ont des cl\u00e9s priv\u00e9es facilement accessibles, n'ayant qu'un octet d'entropie au lieu de 48. eMudhra affirme que les certificats ont \u00e9t\u00e9 g\u00e9n\u00e9r\u00e9s en avril 2025 lors d'une c\u00e9r\u00e9monie publique \u00e0 l'aide de modules mat\u00e9riels HSM (Hardware Security Module) conformes aux exigences FIPS 140-2 Niveau 3. <\/p>\n

Une d\u00e9faillance s'est produite pendant la g\u00e9n\u00e9ration des cl\u00e9s, entra\u00eenant la cr\u00e9ation d'un deuxi\u00e8me ensemble de cl\u00e9s faibles avec des octets sup\u00e9rieurs annul\u00e9s, en plus de l'ensemble principal de cl\u00e9s cryptographiques, lors de l'emballage\/d\u00e9ballage dans le HSM (wrap\/unwrap, cryptage et d\u00e9cryptage avec une cl\u00e9 de wrapping) qui a \u00e9t\u00e9 utilis\u00e9 dans les certificats. La d\u00e9faillance n'a pas \u00e9t\u00e9 d\u00e9tect\u00e9e, car les cl\u00e9s priv\u00e9es sont cr\u00e9\u00e9es et stock\u00e9es uniquement dans le HSM et ne sortent jamais sous forme ouverte. La cause de la d\u00e9faillance n'est pas encore claire et l'entreprise m\u00e8ne une enqu\u00eate \u00e0 ce sujet. Il est affirm\u00e9 que les certificats racines probl\u00e9matiques, g\u00e9n\u00e9r\u00e9s avec des cl\u00e9s faibles, ont pass\u00e9 un audit ind\u00e9pendant et sont rest\u00e9s pendant deux ans dans la liste des certificats approuv\u00e9s dans tous les d\u00e9p\u00f4ts de certificats racines.
\n
Source : opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f eMudhra \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u0435, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0435 \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u043c, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0443 \u0432\u043e\u0441\u044c\u043c\u0438 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043b\u0435\u0433\u043a\u043e \u043f\u043e\u0434\u0431\u0438\u0440\u0430\u0435\u043c\u044b\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u043b\u044e\u0447\u0438, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u0432\u0441\u0435\u0433\u043e 1 \u0431\u0430\u0439\u0442 \u044d\u043d\u0442\u0440\u043e\u043f\u0438\u0438 \u0432\u043c\u0435\u0441\u0442\u043e 48. eMudhra \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0431\u044b\u043b\u0438 \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 2025 \u0433\u043e\u0434\u0430 \u043d\u0430 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0439 \u0446\u0435\u0440\u0435\u043c\u043e\u043d\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u0435\u0439 HSM (Hardware Security Module), \u0438\u043c\u0435\u044e\u0449\u0438\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u044f \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f\u043c FIPS 140-2 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-183960","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Les certificats racines probl\u00e9matiques d'eMudhra ont \u00e9t\u00e9 g\u00e9n\u00e9r\u00e9s dans le HSM et ont pass\u00e9 un audit ind\u00e9pendant | ProHoster","description":"La soci\u00e9t\u00e9 eMudhra a publi\u00e9 une d\u00e9claration concernant un incident au cours duquel huit certificats racines de l'autorit\u00e9 de certification ont des cl\u00e9s priv\u00e9es facilement accessibles, n'ayant qu'un octet d'entropie.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/problematic-emudhra-root-certificates-were-generated-in-an-hsm-and-independently-audited","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b eMudhra \u0431\u044b\u043b\u0438 \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0432 HSM \u0438 \u043f\u0440\u043e\u0448\u043b\u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0439 \u0430\u0443\u0434\u0438\u0442 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f eMudhra \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u0435, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0435 \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u043c, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0443 \u0432\u043e\u0441\u044c\u043c\u0438 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043b\u0435\u0433\u043a\u043e \u043f\u043e\u0434\u0431\u0438\u0440\u0430\u0435\u043c\u044b\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u043b\u044e\u0447\u0438, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u0432\u0441\u0435\u0433\u043e 1 \u0431\u0430\u0439\u0442 \u044d\u043d\u0442\u0440\u043e\u043f\u0438\u0438.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/problematic-emudhra-root-certificates-were-generated-in-an-hsm-and-independently-audited","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-10-22T15:40:31+00:00","article:modified_time":"2026-10-22T15:40:36+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/183960","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=183960"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/183960\/revisions"}],"predecessor-version":[{"id":183961,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/183960\/revisions\/183961"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=183960"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=183960"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=183960"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}