{"id":183960,"date":"2026-10-22T17:40:31","date_gmt":"2026-10-22T15:40:31","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/problemnye-kornevye-sertifikaty-emudhra-byli-sgenerirovany-v-hsm-i-proshli-nezavisimyj-audit"},"modified":"2026-10-22T17:40:36","modified_gmt":"2026-10-22T15:40:36","slug":"problematic-emudhra-root-certificates-were-generated-in-an-hsm-and-independently-audited","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/problematic-emudhra-root-certificates-were-generated-in-an-hsm-and-independently-audited","title":{"rendered":"Certificatele r\u0103d\u0103cin\u0103 problematice eMudhra au fost generate \u00een HSM \u0219i au trecut printr-un audit independent","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Compania eMudhra a publicat o declara\u021bie referitoare la un incident \u00een urma c\u0103ruia opt certificate r\u0103d\u0103cin\u0103 ale autorit\u0103\u021bii de certificare au avut chei private u\u0219or de ghicit, av\u00e2nd doar 1 octet de entropie \u00een loc de 48. eMudhra sus\u021bine c\u0103 certificatele au fost generate \u00een aprilie 2025, \u00eentr-o ceremonie public\u0103, folosind module de securitate hardware HSM (Hardware Security Module) care au certificat de conformitate cu standardul FIPS 140-2 Nivel 3. <\/p>\n

\u00cen procesul de generare a cheilor a avut loc o defec\u021biune, din cauza c\u0103reia, \u00een etapa de ambalare\/deflare \u00een HSM (wrap\/unwrap, criptare \u0219i decriptare cu cheia de ambalare), pe l\u00e2ng\u0103 setul principal de chei criptografice, a fost creat un al doilea set de chei slabe cu byte-uri principale reseteaz\u0103, care au fost utilizate \u00een certificate. Defec\u021biunea nu a fost recunoscut\u0103, deoarece cheile private sunt generate \u0219i p\u0103strate doar \u00een HSM \u0219i nu sunt expuse \u00een mod deschis \u00een afara acestuia. Cauza acestei defec\u021biuni este \u00een prezent neclar\u0103 \u0219i compania efectueaz\u0103 o anchet\u0103 asociaz\u0103. Se sus\u021bine c\u0103 certificatele r\u0103d\u0103cin\u0103 problematice, create utiliz\u00e2nd chei slabe, au trecut printr-un audit independent \u0219i au r\u0103mas timp de doi ani \u00een lista de \u00eencredere din toate depozitele de certificate r\u0103d\u0103cin\u0103.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f eMudhra \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u0435, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0435 \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u043c, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0443 \u0432\u043e\u0441\u044c\u043c\u0438 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043b\u0435\u0433\u043a\u043e \u043f\u043e\u0434\u0431\u0438\u0440\u0430\u0435\u043c\u044b\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u043b\u044e\u0447\u0438, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u0432\u0441\u0435\u0433\u043e 1 \u0431\u0430\u0439\u0442 \u044d\u043d\u0442\u0440\u043e\u043f\u0438\u0438 \u0432\u043c\u0435\u0441\u0442\u043e 48. eMudhra \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0431\u044b\u043b\u0438 \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 2025 \u0433\u043e\u0434\u0430 \u043d\u0430 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0439 \u0446\u0435\u0440\u0435\u043c\u043e\u043d\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u0435\u0439 HSM (Hardware Security Module), \u0438\u043c\u0435\u044e\u0449\u0438\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u044f \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f\u043c FIPS 140-2 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-183960","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Certificatele r\u0103d\u0103cin\u0103 problematice eMudhra au fost generate \u00een HSM \u0219i au trecut printr-un audit independent | ProHoster","description":"Compania eMudhra a publicat o declara\u021bie referitoare la un incident \u00een urma c\u0103ruia opt certificate r\u0103d\u0103cin\u0103 ale autorit\u0103\u021bii de certificare au avut chei private u\u0219or de ghicit, av\u00e2nd doar 1 octet de entropie.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/problematic-emudhra-root-certificates-were-generated-in-an-hsm-and-independently-audited","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b eMudhra \u0431\u044b\u043b\u0438 \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0432 HSM \u0438 \u043f\u0440\u043e\u0448\u043b\u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0439 \u0430\u0443\u0434\u0438\u0442 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f eMudhra \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u0435, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0435 \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u043c, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0443 \u0432\u043e\u0441\u044c\u043c\u0438 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043b\u0435\u0433\u043a\u043e \u043f\u043e\u0434\u0431\u0438\u0440\u0430\u0435\u043c\u044b\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u043b\u044e\u0447\u0438, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u0432\u0441\u0435\u0433\u043e 1 \u0431\u0430\u0439\u0442 \u044d\u043d\u0442\u0440\u043e\u043f\u0438\u0438.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/problematic-emudhra-root-certificates-were-generated-in-an-hsm-and-independently-audited","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-10-22T15:40:31+00:00","article:modified_time":"2026-10-22T15:40:36+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/183960","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=183960"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/183960\/revisions"}],"predecessor-version":[{"id":183961,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/183960\/revisions\/183961"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=183960"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=183960"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=183960"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}