Does your firmware ship an eMudhra CA?

1 min read Original article ↗

elfmudhra

Fix My Firmware

eMudhra is a certificate authority (CA) that has root certificates in all major trust stores. Eight intermediate CA certificates signed by eMudhra's emSign ECC Root CA - G3, and cross-signed by Sectigo's AAA Certificate Services, have been compromised. This tool checks whether these root CA certificates are present in an ELF file, which could mean your firmware will trust the compromised intermediate CAs, making it susceptible to man-in-the-middle (MITM) attacks.

This check is not comprehensive and does not guarantee that the involved CA certificates are not present on a device.

Drop a firmware ELF here

.elf, .axf, .out · scanned in this tab · non-ELF files are scanned as raw bytes

Local only. Your ELF files stay on your computer and are never uploaded.