Trivial Private Keys Compromise Over 60 Million eMudhra Digital Certificates, Triggering Global Revocations

A critical security vulnerability has compromised Indian certifying authority eMudhra after independent researchers discovered that several of its intermediate private keys were trivial single- and double-digit integers—including the number 4. Because these keys sign trust across networks, the incident threatens the integrity of more than 60 million digital certificates issued by the authority and has prompted an emergency, industry-wide response.

The Incident and Potential Threat

The security lapse came to light via Dennis Jackson of Mozilla’s cryptography engineering team, who confirmed that Mozilla received an alert regarding eight compromised intermediate certificates belonging to eMudhra.

When a certificate authority’s private signing keys are exposed or trivially weak:

• Malicious actors can forge legitimate-looking HTTPS digital certificates for domains they do not own.
• Attackers can carry out interception attacks (man-in-the-middle), impersonating trusted servers to decrypt, intercept, or modify web traffic seamlessly without generating typical browser warnings.

Cloudflare noted that such a compromise enables an attacker to impersonate virtually any web server and manipulate user communications at scale.

Alarmingly Weak Private Keys Exposed

Standard elliptic curve cryptography—specifically NIST P-384 curves—requires a randomly generated 384-bit integer, yielding roughly $2^{384}$ (about $10^{115}$) possibilities, making brute-force enumeration computationally impossible.

However, analysis by security researcher Scott Helme revealed that eMudhra utilized dangerously small integer values instead of cryptographically secure random numbers:

• One intermediate private key was literally the single integer 4.
• Additional keys identified by researchers were simple integers including 56, 66, 115, 155, 156, 230, and 237.

Helme noted that he was able to reverse-engineer these private keys directly from the publicly accessible certificate data in less than a second on a standard laptop. The complete lack of entropy left the underlying infrastructure entirely defenseless against basic brute-force derivation.

Global Remediation and Ecosystem Response

Major operating systems, root store programs, and open-source ecosystems moved quickly to isolate the compromised trust anchors:

• Root Store Operators: Mozilla, Google Chrome, and Apple have deployed software patches to revoke trust in the affected intermediate certificates and prevent client software from validating certificates chained to them.
• Certificate Revocation: eMudhra has reportedly revoked the compromised intermediate certificates, while multiple open-source software libraries and distributions are releasing out-of-band updates to prune them from their trust stores.
• Enterprise Exposure: While modern web browsers routinely receive automated trust updates, enterprise networks, internal servers, APIs, and specialized operational software that rely on static or cached root/intermediate stores must manually audit their infrastructures to identify and replace certificates signed by eMudhra.

eMudhra has not officially detailed how such fundamentally insecure keys were generated or placed into a production public key infrastructure (PKI) environment.