PKI
A security infrastructure system for managing digital certificates and public-private key pairs. It serves as the technical foundation for advanced and qualified electronic signatures, enabling identity authentication and document integrity verification through asymmetric encryption.
Core Facts
Timeline (last 90 days)
eMudhra is an Indian listed company whose core business is digital identity and PKI (public key infrastructure).
PKI binds identities to public keys through a CA hierarchy, and its security depends on the assumption that 'all CAs strictly safeguard their private keys'; there are dozens of root CAs worldwide, distributed across different jurisdictions, and audits struggle to cover internal operations.
After the intermediate CA private keys leak, attackers could theoretically forge valid TLS certificates for any domain.
In the PKI system, root certificates are usually kept offline and rarely issue end-entity certificates directly, while intermediate CAs handle day-to-day issuance duties.
The double-envelope scheme relies on public key infrastructure (PKI) and strong authentication methods such as smart cards or Mobile-ID.
The root of trust that CIMD relies on is the PKI system of HTTPS itself, replacing a centralized registry with domain name ownership.
The internet's trust infrastructure PKI (Public Key Infrastructure) is largely concentrated in the hands of a small number of institutions subject to the jurisdiction of specific countries.
Old root certificates or intermediate certificates whose private keys have been recovered, if not thoroughly revoked, may still pose a threat to legacy devices that have not updated their trust chains.
All Facts (9)
In the PKI system, root certificates are usually kept offline and rarely issue end-entity certificates directly, while intermediate CAs handle day-to-day issuance duties.
75%UnverifiedIBE 加密体系中用户的身份信息（如邮箱地址、手机号）直接充当公钥，无需传统 PKI 体系中的证书申请与管理流程
95%UnverifiedeMudhra is an Indian listed company whose core business is digital identity and PKI (public key infrastructure).
50%UnverifiedPKI binds identities to public keys through a CA hierarchy, and its security depends on the assumption that 'all CAs strictly safeguard their private keys'; there are dozens of root CAs worldwide, distributed across different jurisdictions, and audits struggle to cover internal operations.
50%UnverifiedAfter the intermediate CA private keys leak, attackers could theoretically forge valid TLS certificates for any domain.
50%UnverifiedThe double-envelope scheme relies on public key infrastructure (PKI) and strong authentication methods such as smart cards or Mobile-ID.
50%UnverifiedThe root of trust that CIMD relies on is the PKI system of HTTPS itself, replacing a centralized registry with domain name ownership.
50%UnverifiedThe internet's trust infrastructure PKI (Public Key Infrastructure) is largely concentrated in the hands of a small number of institutions subject to the jurisdiction of specific countries.
50%UnverifiedOld root certificates or intermediate certificates whose private keys have been recovered, if not thoroughly revoked, may still pose a threat to legacy devices that have not updated their trust chains.
50%