eMudhra key flaw raised by researchers, Google and Mozilla respond
In short
Researchers found eight private keys in part of eMudhra’s certificate setup were weak enough to be recovered. Google and Mozilla stepped in after the flaw was spotted.
The reporting suggests this could affect trust in eMudhra’s security system, but it does not say when the issue was fixed or how many users were hit.
What the reporting says
Researchers found that eight private keys underpinning part of listed digital trust company eMudhra’s certificate infrastructure were so weak they could be recovered, according to a publisher summary. The reporting says Google and Mozilla stepped in after the flaw was identified, but it does not state when the issue was fixed or whether any users were affected. The immediate business or security impact is not fully stated in the available reporting.
Why it matters
Researchers reported that eight private keys tied to part of eMudhra’s certificate infrastructure were weak enough to be recovered. The summary says Google and Mozilla stepped in after the flaw was found, pointing to a browser and certificate-trust response. The available reporting does not state when the issue began, whether customers were exposed, or what remediation eMudhra completed.