eMudhra’s Security Key Flaw: What Went Wrong And Why Google, Mozilla Stepped In
Eight private keys underpinning part of listed digital trust company eMudhra’s certificate infrastructure were so weak that researchers could recover…
eMudhra, a digital trust company listed on the Bombay Stock Exchange, discovered a security flaw in eight private keys used for its certificate infrastructure. The weak keys could be reconstructed from publicly available certificates by a researcher named Wayne. Major technology companies, including Google, Mozilla, Apple, and Microsoft, blocked the affected certificates, prompting a broader effort to protect browsers, applications, and enterprise systems. eMudhra's Indian operations, which use a separate infrastructure, remained unaffected.
The compromised keys could allow attackers to create fraudulent certificates, impersonate websites, and intercept or modify communications. While the incident did not impact eMudhra's core revenue, authorities warned about the potential risk to software relying on certificate trust stores.
Written by urgent.news from Inc42's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
