eMudhra security breach explained: How weak cryptographic keys could threaten online security

eMudhra an Indian company that provides digital identity and digital signature services has been under serious scrutiny after eight digital certificates issued by them were found to have weak cryptographic private keys that could reportedly be recovered almost instantlyThe flaw in the generation of cryptographic keys used by eMudhrarsquos global security infrastructure has prompted an investigation by Indiarsquos Ministry of Electronics and Information Technology MeitY alongside protective measures by major browser makersWhy does this case raise bigger concernsWhile the incident might initially sound like a routine security flaw it raises serious concerns about a system that underpins trust in websites and software distributed over the interneteMudhra operates a global certificate authority business that issues digital certificates used by browsers to verify website identities and establish secure connections Its codesigning certificates help verify the identity of software publishersThe discovery highlights how a weakness in the generation of cryptographic keys the digital secrets used to secure and authenticate certificates can potentially undermine the trust placed in websites and softwareHowever the risk posed by the compromised keys must be distinguished from confirmed harm eMudhra has said that none of the affected intermediate certificate authorities issued certificates to enduser websites or softwareHow do digital certificates workTo understand the implications of the incident it is important to know how digital certificates establish trust onlineWhen a user visits a website using HTTPS the browser checks its digital certificate to establish whether the website can be trusted and to help secure the connectionThese certificates are issued through a hierarchy of trusted Certificate Authorities which use cryptographic keys to sign certificates and establish their authenticityHow could weak keys threaten online securityCryptographic private keys are designed to be practically impossible to guess or derive from their corresponding public keys when generated correctly Their strength depends among other factors on sufficient randomness during key generationIn this case the weak private keys could be recovered almost instantly because their numerical values were extraordinarily small mdash less than 256 mdash making them easy to derive from their corresponding public keys Anyone who obtained the keys could potentially use them to create fraudulent certificates within the scope of the affected certificate authoritiesThe possible consequences includeWebsite impersonation An attacker could attempt to make a fraudulent website appear to be a legitimate banking shopping or other trusted websiteInterception of communications Under the right network and technical conditions a fraudulent certificate could help an attacker intercept or modify encrypted communicationsSoftware impersonation The compromised codesigning keys could potentially be used to create fraudulent signing certificates making malicious software appear to come from a legitimate publisherThese are potential risks arising from the compromised keys not evidence that such attacks occurred in this incidentWhat happened in the eMudhra security incidentAccording to eMudhrarsquos disclosure and an advisory issued by the Indian Computer Emergency Response Team CERTIn on October 21 2026 the incident involves eight intermediate Certificate Authority CA certificates associated with the companyrsquos global Transport Layer Security TLS business Six were used for Transport Layer Security TLS which helps secure website connections while the remaining two were intended for code signingThe problem originated during a keygeneration ceremony conducted on April 30 2025 According to the company a flaw in the process caused a wrapandunwrap operation to generate a second set of weak cryptographic keys alongside the intended stronger keys The weaker keys were subsequently published to browser trust storesThe affected keys used the P384 ellipticcurve cryptographic system but their private values were so small that they could be recovered almost instantly The weakness was not in the P384 algorithm itself but in the process used to generate the keysGoogle and Mozilla take strict actionThe issue came to light after a security researcher reported the compromised keys to major browser root programmes earlier on October 17Following the incident Google and Mozilla subsequently moved to block the affected certificates while other technology companies also took protective measuresHow could weak keys threaten online securityCryptographic private keys are designed to be practically impossible to guess or derive from their corresponding public keys when generated correctly Their strength depends among other factors on the use of sufficient randomness during generationIn this case the weak private keys could be recovered because their values were far smaller than expected Anyone who obtained the keys could potentially use them to create fraudulent certificates within the scope of the affected certificate authorities