Documentation
¶
Overview ¶
Package emudhra is the detector for the eMudhra intermediate CA keys compromised in October 2026 (Mozilla bug 2083449): trust stores, keystores, bundles and binaries that still trust them, Go binaries without Go's blocklist, and servers presenting certificates the compromised keys signed.
The detection itself lives in internal/, copied verbatim from emudhra-scan (see SNAPSHOT at the repo root). This file only adapts it to the engine and replays emudhra-scan's per-target collector, so verdicts stay identical.
Index ¶
Constants ¶
const ID = "emudhra"
ID is the detector's ID.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Detector ¶
type Detector struct {
// contains filtered or unexported fields
}
Detector implements engine.Detector and engine.Prober.
func (*Detector) Load ¶
Load loads and verifies the knowledge base: each compromised key is proven to be k·G for its small k before anything is scanned.
Source Files
Directories
¶
| Path | Synopsis |
|---|---|
|
internal
|
|
|
assess
Package assess decides whether each finding is live trust or an inert copy.
|
Package assess decides whether each finding is live trust or an inert copy. |
|
detect
Package detect inspects one file's bytes and reports facts about it.
|
Package detect inspects one file's bytes and reports facts about it. |
|
knowledge
Package knowledge holds the certificates involved in the October 2026 eMudhra intermediate CA key compromise (Mozilla bug 2083449) and the facts the scanner matches on.
|
Package knowledge holds the certificates involved in the October 2026 eMudhra intermediate CA key compromise (Mozilla bug 2083449) and the facts the scanner matches on. |
|
weakkey
Package weakkey finds elliptic-curve public keys whose private scalar is tiny.
|
Package weakkey finds elliptic-curve public keys whose private scalar is tiny. |