eMudhra quits TLS business after weak-key scandal
Original: Disgraced eMudhra drops out of TLS business after using cert private key of 4
Why This Matters
A CA issuing forgeable certs undermines the entire web trust model.
Indian CA eMudhra is exiting the TLS certificate business after issuing 8 intermediate certs with private keys as small as 4 bits, allowing anyone to forge trusted credentials for any website or mail server.
eMudhra, the India-based certificate authority, announced it is withdrawing from the global SSL/TLS business following a damaging revelation: eight intermediate certificates it issued had private encryption keys so weak they could be cracked in milliseconds. The defective keys ranged from just 3 to 8 bits of entropy. NIST P-384 certificates are supposed to carry roughly 384 bits — meaning 2^384 possible keys. The strongest compromised cert had a maximum of 256 possibilities. The private key values were literally 4, 56, 66, 115, 155, 156, 230, and 237.
Anyone exploiting these flaws could have minted TLS certificates trusted by all major browsers, email servers, IoT devices, and more. Browser makers blocked the affected certificates within days of discovery. eMudhra likely also faced expulsion from the CA/Browser Forum.
The company says the flaw originated in a Key Generation Ceremony on April 30, 2025, using FIPS 140-2 Level 3 HSMs, where a wrap/unwrap step produced a second set of weak keys alongside valid ones. Chairman V. Srinivasan cited rising compliance costs and TLS generating only 1% of revenue as reasons to exit — while also complaining that "social media amplification" brought "disproportionate scrutiny."