Technology
eMudhra flags weak keys in 8 certificate authorities
The Hindu BusinessLine·
eMudhra told exchanges a key-generation flaw produced weak cryptographic keys for eight intermediate certificate authorities. It said infrastructure was not compromised and there was no data breach. The authorities were created under its ECC root on April 30, 2025. Indian DSC and eSign services run separately and continue normally. The stock was down 20 percent to 432.0 on the NSE.
Prism
What It Means For You
- eMudhra said it is issuing replacement certificates to potentially affected customers.
- It said the affected global TLS business is around 1 percent of revenue.
- A researcher reported the weak keys to Apple, Google, Microsoft and Mozilla on October 17.
What's Happening
- Weak keys were published to browser root stores beside the original strong keys, eMudhra said.
- The firm said it is coordinating with browser root programmes during the investigation.
- CERT-In had not commented at the time of the BusinessLine report.
How the flaw was described
- The ceremony used FIPS 140-2 Level 3 Hardware Security Modules, the company said.
- eMudhra said physical and logical security controls remained intact.
- BusinessLine reported the share price down 108 points, or 20 percent, in morning trade.
all-news
