eMudhra’s Security Key Flaw: What Went Wrong And Why Google, Mozilla Stepped In
by Anjali Jain · Inc42SUMMARY
- A researcher recovered eight eMudhra private keys from publicly available certificates after discovering that they had been generated using predictable numbers, prompting major technology companies to distrust the affected certificates
- Compromised certificate authority keys can potentially enable fraudulent website certificates, raising concerns about internet security and the reliability of digital trust infrastructure
- eMudhra has attributed the flaw to an error during a 2025 key-generation ceremony, with browser makers and software developers now working to block affected certificates and secure systems