eMudhra Exits Global TLS Business After Issuing Eight Certificates With 3-8 Bit Keys

6.0 · 11d ago · WORLD · TECH

The Facts

  • India-based certificate authority eMudhra Limited announced it is withdrawing from the global SSL/TLS certificate business, in a Thursday post; chairman V. Srinivasan cited compliance costs and complexity, and said TLS generates about 1 percent of company revenue. Ars Technica only
  • The company's board said the scrutiny from social media amplification of the incident was out of proportion to TLS's place in its business, and concluded that withdrawing was the right decision for eMudhra and its shareholders. Ars Technica only
  • The announcement came two days after researchers revealed eMudhra had issued eight intermediate TLS certificates with private keys weak enough to let anyone mint browser-trusted certificates for any site. Ars Technica only
  • Eight intermediate TLS certificates belonging to eMudhra had private keys of 3 to 8 bits (values 4, 56, 66, 115, 155, 156, 230, 237), versus roughly 384 bits of entropy expected for NIST P-384 keys. Ars Technica only
  • eMudhra said the certificates were created in a Key Generation Ceremony held April 30, 2025, using FIPS 140-2 Level 3 HSMs; a flaw in a wrap/unwrap step produced a second set of weak keys alongside the original strong keys, and the weak keys were mistakenly used to create the CSRs and were published to browser root stores. Ars Technica only
Dive deeper · 6 more factsShow less
  • In a Mozilla Bugzilla thread, eMudhra said the weak keys' CSR was also sent to Sectigo for cross-signing, that human errors occurred in multiple steps, and that it will reverify every key ceremony it has done over the next week. Ars Technica only
  • Browser makers blocked certificates issued under the intermediates within a day or two of discovery. Ars Technica only
  • Devices outside browsers, including embedded and IoT devices, Docker containers and some Linux systems, may take much longer to block the certificates or never be able to. Ars Technica only
  • A message reading 'We have a problem here – Wayne' was posted to emudhra.we-have-a-problem.com and signed with the private key of one of the certificates, demonstrating control of the key. Ars Technica only
  • There are no reports of certificate transparency logs showing the compromised keys being used maliciously. Ars Technica only
  • Cryptography engineer Filippo Valsorda said the cleanup will be bigger than Heartbleed, with a long tail of affected devices and tools. Ars Technica only

Context

eMudhra Limited, an India-based certificate authority, said it will exit the global TLS certificate business days after researchers disclosed that eight of its intermediate certificates used extremely weak private keys.

The company attributes the flaw to an error in a key generation ceremony script and human mistakes, and says it is investigating root cause. Browsers have blocked the certificates, but other systems that embed the roots may remain exposed for longer.

How the Agent Panel Scored This

Independent AI personas each scored importance 1–10; the story's score is a trimmed mean (highest and lowest votes dropped). Vote spread: 2.

6 News Editor The concrete event is a CA exiting the TLS business after a serious key-weakness incident that forced browser blocks and leaves a long tail of exposed embedded devices, which is newsworthy and security-significant but mainly affects a niche certificate authority's customers and technical infrastructure rather than the general public.
6 Global Affairs Analyst A certificate authority's exit from the TLS business after issuing intermediate certificates with trivially breakable keys is a significant security incident with a long tail of exposed devices, but its concrete scope is limited to one CA and browsers have already blocked the certificates.
6 Critical Reader A CA exiting the TLS business and blocking of eight weak intermediate certificates is a concrete, meaningful security event with a long tail for IoT and non-browser systems, but its scope is limited to one small CA's certificates and browsers already responded, so it sits in the moderate-to-significant range.
6 Policy Expert The concrete events are a CA's announced withdrawal from the global TLS business and browser blocking of eight weakly keyed intermediate certificates, a significant security incident with a long tail of affected devices, though the story is niche to certificate authorities rather than broad public impact.
6 Informed Citizen A CA exiting the TLS business is a concrete corporate action with some security relevance, and the weak-key intermediates pose a real long-tail risk to IoT and non-browser systems, but the direct impact on ordinary users is limited since browsers already blocked the certificates and no malicious use has been found.
6 Science & Tech Analyst A certificate authority's exit from the TLS business after issuing browser-trusted intermediates with trivially breakable keys is a notable security incident with a long tail of affected devices, but it is limited to one small CA and its concrete impact has been largely contained by browser blocking.
4 Business Analyst This is a niche security incident at a small CA where TLS is only about 1 percent of eMudhra's revenue, and the concrete event (exiting TLS business) has limited market impact, though the weak-key cleanup has broader security implications that keep it above minor.

Sources (2)

← All stories