Certificate authority eMudhra exits global TLS business after catastrophic single-digit private key scandal
Flawed key generation ceremony generated elliptic curve certificates with trivial private keys like 4, allowing instantaneous forgery of web credentials.
Technology news
India-based certificate authority eMudhra Limited announced on Thursday that it is permanently withdrawing from the global SSL/TLS digital certificate business, bringing an ignominious close to a catastrophic cryptographic failure that allowed arbitrary web credentials to be minted using trivial, single-digit private encryption keys. The decision follows emergency actions by major browser vendors, including Google, Apple, and Mozilla, to distrust eMudhra's root certificates worldwide.
The vulnerability emerged when independent security researchers discovered that eMudhra had published eight intermediate Elliptic Curve Cryptography (ECC) certificates with private keys ranging between just 3 and 8 bits of entropy, instead of the mandated 384 bits required by NIST P-384 specifications. Rather than requiring computational brute-forcing across billions of possibilities, the private keys were trivial integers—specifically 4, 56, 66, 115, 155, 156, 230, and 237—enabling any computer script to forge trusted SSL/TLS certificates for any website in fractions of a millisecond.
In disclosures submitted to Mozilla’s Bugzilla tracking forum, eMudhra revealed that the defective keys originated during a formal Key Generation Ceremony (KGC) on April 30, 2025. An unauthorized script modification intended to test key export and wrap/unwrap functions on FIPS 140-2 Level 3 Hardware Security Modules (HSMs) generated a second set of weak dummy keys on the hardware. Due to identical key labeling and procedural human errors, administrators mistakenly submitted the weak dummy keys to cross-signing authorities and published them to public browser trust stores.
In an executive statement, eMudhra Chairman V. Srinivasan conceded that the intense global scrutiny from the CA/Browser Forum and cybersecurity community made continued participation in the public TLS market commercially untenable, noting that the product line generated merely 1 percent of the firm’s total corporate revenue. While modern browsers rapidly updated certificate revocation lists to neutralize the immediate threat, millions of embedded IoT devices, legacy Linux distributions, and container environments that do not automatically update trust roots remain vulnerable to potential impersonation attacks.