PoC: how the eMudhra/emSign weak CA-key compromise (Oct 2026) MITMs systems with stale trust stores — lab-only, throwaway keys
-
Updated
Oct 25, 2026 - Python
PoC: how the eMudhra/emSign weak CA-key compromise (Oct 2026) MITMs systems with stale trust stores — lab-only, throwaway keys
Zero-dependency audit & one-click remediation tool for eMudhra/emSign 1-byte private key entropy flaw (Mozilla Bug 2083449). Supports Windows, Linux & Python.
Offline scanner for the October 2026 eMudhra/emSign CA key compromise, finds affected certificates across OS trust stores, CA bundles, Java cacerts, NSS and container images.
Offline eMudhra / emSign certificate scanner for Windows, Linux and macOS. Find compromised CA certificates, affected trust stores and signed software with Python or PowerShell.
Local reproduction of the Oct 2026 eMudhra/emSign intermediate-CA compromise + differential trust-store tests across 6 clients.
Detection rules and indicators to block the compromised eMudhra emSign G3 intermediate CAs.
To associate your repository with the emsign topic, visit your repo's landing page and select "manage topics."