India, Oct. 21 -- eMudhra Limited has issued a statement regarding the distrust of eight intermediate Certificate Authorities (CAs) and one root CA associated with its global Transport Layer Security (TLS) business, following the discovery of weak cryptographic keys.
The company said a flaw during a key generation ceremony on April 30, 2025, resulted in a second set of weak keys being generated alongside the original strong keys. The weak keys were published to browser root stores, and an independent researcher recently reported that they could potentially be reverse-engineered using AI-assisted techniques.
eMudhra clarified that its infrastructure was not compromised, no data was breached, and all physical and logical security controls r...