India’s electronics ministry has launched an inquiry after weak private-key generation compromised eight eMudhra certificates, prompting Google, Apple, Microsoft and Mozilla to revoke them worldwide.
India’s electronics ministry has opened a special inquiry after disclosures that eight intermediate certificate authority certificates linked to eMudhra’s international web-security operations were compromised because of weaknesses in the way their private keys were generated. According to the News18 explainer, the flaw involved insufficient cryptographic randomness, which can make private keys easier to derive than they should be and can undermine trust in encrypted website connections.
The incident triggered rapid action across the global browser and platform ecosystem. Google, Apple, Microsoft and Mozilla moved to revoke the affected certificates across their products, while Cloudflare put mitigations in place to protect network traffic, the report said. In India, however, officials have sought to limit alarm, saying the issue is confined to eMudhra’s overseas public key infrastructure and does not affect domestic services such as Digital Signature Certificates or eSign systems overseen by the Controller of Certifying Authorities. The Indian Computer Emergency Response Team has also issued guidance for administrators as the probe continues, and eMudhra has said it is replacing the affected certificates for global clients.
Disclaimer: This content is intended for informational purposes only. Readers are advised to exercise their own judgement, conduct due diligence, or consult a qualified expert before acting on any information provided.
