Emergency distrust of eMudhra root and intermediate CAs after key generation flaw made private keys brute-forceable

76/100

Cisco reports that a researcher showed the private keys for eight eMudhra intermediate certificates could be brute-forced within seconds because of an error in an April 2025 key generation ceremony. This would let anyone obtain the keys and issue certificates that chain to eMudhra roots. Defenders should apply trust-store updates that distrust the affected eMudhra CAs and replace any certificates issued by them.