Eight intermediate TLS certificates from eMudhra with private key sizes of just 3 to 8 bits were compromised; browser makers and major apps have blocked them

Security personnel around the world are on high alert Tuesday following the discovery of eight TLS certificates with private keys …

Ars Technica 2026-10-21 Dan Goodin

Context & Ripple Effects

The eMudhra incident joins a long record of failures at the web’s certificate-authority layer, from the Comodo certificate-authority attack in 2011 to Google's 2015 warning about unauthorized certificates trusted across operating systems. The distinguishing issue here is not a flaw in TLS itself but intermediate authorities protected by trivially weak private keys.

The response has spread beyond browser vendors: Mozilla, Google and Apple are reported to have blocked the affected intermediates, while Cloudflare says remediation extends beyond browsers. Public reaction has focused on the downstream systems that inherit trust from browser-root programs but may not receive the same rapid blocklists.

First-order effects

Browsers and major applications that block the eight intermediates stop accepting certificate chains issued through them, cutting off a route for impersonation using the compromised keys.
eMudhra’s affected intermediate certificates lose their practical value to clients enforcing the blocks, while Cloudflare is deploying mitigations and client updates for its own users.

Second-order effects

Operators of software outside mainstream browser update channels face a separate remediation burden, because their trust stores and certificate-validation paths may not receive the browser vendors’ emergency blocks.
The incident puts certificate authorities’ key-generation and issuance controls under intensified scrutiny, as relying parties reassess whether root-program trust alone is sufficient assurance for subordinate CAs.

Third-order effects

If major platforms increasingly respond to CA failures by independently blocking intermediates, control of the web’s trust layer shifts further toward browser, operating-system and large-network operators rather than certificate authorities alone.
The event strengthens the case for interoperable, rapidly distributed revocation and trust-store mechanisms, since the protection available to users depends on how quickly each client ecosystem can enforce a block.

The trend: Web PKI is moving toward faster, platform-led containment of certificate-authority failures, exposing uneven security across the long tail of trust-store implementations.

Discussion

9to5Linux Marcus Nestor on x
Firefox 158.0.1 Is Out to Block Compromised eMudhra Intermediate Certificates
@ghidraninja @ghidraninja on x
So the private-key for the eMudhra (revoked) intermediate was apparently 4. How is the root still trusted? How broken are your processes if this can happen? And honestly: How have we (as an industry) not noticed earlier :(
@cloudflare @cloudflare on x
Following the discovery that eight eMudhra intermediate certificates use weak keys, Cloudflare is deploying mitigations and releasing client updates. We explain the impact, our response, and what customers and developers should do next. https://blog.cloudflare.com/ ...
@jedisct1 Frank on x
The private keys of eight eMudhra intermediate CA certificates have been compromised. They chain to roots trusted by the Mozilla, Microsoft, Apple and Chrome root programs and by many downstream trust stores. https://emudhra.we-have-a-problem.com/
@scott_helme Scott Helme on x
Damn, this is really bad. Mainstream browsers will probably be fine, but there is a long tail of other stuff that will be affected by this: https://scotthelme.co.uk/...
@logic @logic on x
This may be the first major CA incident both discovered by an AI agent (the reporter Wayne's discovery path hints at it) and confirmed via agents recovering keys with a single prompt. Global shame - @eMudhra
@astuyve AJ Stuyvenberg on x
more answers here https://bugzilla.mozilla.org/ ...
@renebrandel René Brandel on x
In 2011, attackers impersonated Google by compromising a Dutch company most Google users had never heard of. The company was DigiNotar. Its job was to issue certificates that browsers accepted as proof of a website's identity. A fraudulent Google certificate from that company was…
@emudhra @emudhra on x
eMudhra is investigating a security incident affecting a portion of our TLS certificate customers. This incident has no impact on customers using our enterprise applications, digital signature services, or other electronic signature solutions. We are actively engaging with affect…
@icesolst @icesolst on x
I don't understand? How
@rob1ham Rob Hamilton on x
The 8 certificates were numbers between 0 and 255. Not 255 bits of entropy. Just, the number 4 for one of them. Not an example of an AI hack.
@charliermarsh Charlie Marsh on x
We just released uv 0.13.4, which updates our bundled certs in response to the eMudra incident. This is a huge deal, and not unique to uv! It affects much of open source due to bundled CAs in certifi, webpki-root-certs, etc. Please upgrade anything that bundles CA certs.
@mudit__gupta Mudit Gupta on x
Instead of using 384 bit random private keys, they used private keys like the super secret, unguessable number 4. They are a cryptography company. They had one job. They're selling Post-Quantum Cryptography while doing shit like this lmao.
@iangcarroll Ian Carroll on x
It appears these intermediary certificates were issued with single-byte P-384 private keys. This means anyone can exploit this issue locally and issue valid certificates under them with no effort. This is very, very bad! Seems undetected since issuance in 2025?
@championswimmer Arnav Gupta on x
What a terribly poor situation. And it happens because of lack of actual meritocracy in India. What is eMudhra business model? Regulatory capture. What is their competency? Being in cahoots with the govt. All govt organisations and PSU banks use them and they are one of the
@astuyve AJ Stuyvenberg on x
private keys from 8 intermediate CA certs have been compromised (eMudhra) Happy “Update everything” day to all my pager-carrying friends https://emudhra.we-have-a-problem.com/
@geoffreyhuntley Geoff on x
idk if you saw but eMudhra CA got popped. big deal folks. https://emudhra.we-have-a-problem.com/ Have monkey-patched https://overalls.dev/ and found a new cute trick. My new favorite prompt follows: >
@mwfowlie Michael Fowlie on x
I can't believe how bad this is. This is unbelievably bad. 8 bit private keys that can sign any domain since 2025
@skooookum @skooookum on x
Some chungus millennial wanted to be cheeky and do their favorite XKCD bit
@jakehalloran1 Jake Halloran on x
its obviously not *good* but admittedly having a private key of *4* as a globally trusted cert authority is one of the funniest bits of all time
@kanavtwt @kanavtwt on x
Cloudflare: We recorded a wall of 100+ lava lamps with cameras to generate unpredictable, maximum-entropy cryptographic seed data. Meanwhile Certificate Authorities:
@secparam Ian Miers on x
Relevant XKCD strikes again, this time for real. A certificate authority actually generated private keys where 4 was part of the key.
@iangcarroll Ian Carroll on x
For the next few days or weeks, anyone now has a root CA thanks to eMudhra. Time to have some fun with MiTMing unwilling devices!
@daniellockyer Daniel Lockyer on x
Node.js security releases for this are coming out tomorrow (Wednesday 21st)
@championswimmer Arnav Gupta on x
eMudhra private key was just “4” Wtf? What an unserious CA. This 13-foot wall ecosystem of India continues to do cybersecurity from kindergarten
@otomir23 @otomir23 on x
a trusted intermediate CA just “leaked” (the private key was 4)
@malwarejake Jake Williams on bluesky
I had to read the sentence “Astonishingly, the private keys were 4, 56, 66, 115, 155, 156, 230, 237” several times, because despite knowing @dangoodin.bsky.social superior attention to detail, my brain was *certain* that could not be correct. [embedded post]
@molly.wiki Molly White on bluesky
“The compromised eMudhra keys were defective at a level that's challenging the imagination of many of the engineers studying the incident. ... ‘That is extremely in the ‘this should not be possible’ category,’ Valdorda said.” [embedded post]
r/worldnews r on reddit
The Internet goes on high alert after discovery of 8 compromised TLS certs
r/rust r on reddit
PSA: If your program does HTTP requests, update your dependencies now
r/technology r on reddit
Protecting Firefox users following the compromise of eMudhra intermediate certificates - Mozilla Security Blog
r/programming r on reddit
eMudhra Intermediate CA Compromise
r/cybersecurity r on reddit
The Internet goes on high alert after discovery of 8 compromised TLS certs
r/IndiaTech r on reddit
Private key compromise of eMudhra Intermediate Certificates
r/india r on reddit
eMudhra Intermediate CA Compromise
r/PrepperIntel r on reddit
The Internet goes on high alert after discovery of 8 compromised TLS certs
r/NixOS r on reddit
Update your system: eMudhra Intermediate CA Compromise
r/CloudFlare r on reddit
8 eMudhra certificates are compromised. Here's what you need to know
r/technology r on reddit
The Internet goes on high alert after discovery of 8 compromised TLS certs
@atproto.com @atproto.com on bluesky
The eMudhra intermediate CA compromise broadly impacts the atproto ecosystem. At this point lots of software has been patched, and we recommend upgrading if you run a distribution of the relay, pds, jetstream, or use the goat CLI. For general information see the site linked bel…
@jameswise James Wise on x
If it wasn't obvious already we're in a completely new paradigm of cyber vulnerabilities. Product teams at Cloudflare, Mozilla, Chrome, Safari etc are doing incredible work keeping up - but wow we need more and better defensive cyber models to harden applications and the web yest…
@pranesh Pranesh Prakash on x
The eMudhra mess-up is inexplicable. It's got a massive attack surface. And it is hard to patch all the software that can be compromised given how CA certs are treated by some devices as permanent. https://bugzilla.mozilla.org/ ... for full shit-show https://emudhra.we-have-a-pro…
@lukolejnik Lukasz Olejnik on x
Be careful when developing on macOS now. Apple did not yet revoke the vulnerable certificates …
@matthew_d_green Matthew Green on x
How do you even generate an RSA key with d=4, I ask, not wanting to be told the answer.
r/unitedstatesofindia r on reddit
Indian company, eMudhra's Intermediate CA certificate Compromised
@shreyacodess20 Shreya Sharma on x
Firefox 158.0.1 (64-bit) Brave 1.97.59 (Official Build) (64-bit)
@mohamedmansour Mohamed Mansour on x
Make sure Microsoft Edge and Google Chrome have the latest component to protect yourself. …
@lyq_sqsp @lyq_sqsp on x
Test your device with https://dv-g3b-emudhra.we-have-a- problem.com/ I still remember that my PhD collaborator's paper was rejected for “it is practically impossible for modern PKI to fail.” [image]
@nateberkopec Nate Berkopec on x
Congratulations, the world has granted you a perfect test case today for your cybersecurity model access. https://emudhra.we-have-a-problem.com/ [embedded post]
@lukolejnik Lukasz Olejnik on x
The most accurate security advisory of the year fit in 5 words! Someone obtained the private keys of eight intermediate certificate authorities, which means they could issue a trusted certificate for any website on the internet. To prove it, the reporter signed the same short not…
@shobhitic @shobhitic on x
this emudhra fiasco is downright embarrassing they just had to make private key with this command, but they made with the unguessable number: 4 and they were the supplier to PSU and govts how does something this catastrophically stupid pass security audits? fucking corruption
@crmullins Chris Gobblins on x
Update everything today: browsers, OS security patches, etc. today is not the day to ignore the “Your connection is not private” page https://emudhra.we-have-a-problem.com/
@marcosbl Marcos Besteiro on x
We have a problem here - Wayne The private keys of eight eMudhra intermediate CA certificates have been compromised. They chain to roots trusted by the Mozilla, Microsoft, Apple and Chrome root programs and by many downstream trust stores. https://emudhra.we-have-a-problem.com/
r/technology r on reddit
Indian certification authority eMudhra's private keys compromised - one of them was the number ‘4’
@davetroy Dave Troy on x
The internet is currently fundamentally insecure after a major security hole makes HTTPS vulnerable to Man in the Middle attacks. Install updates on all devices. https://arstechnica.com/...
@esqueer.net Alejandra Caraballo on bluesky
Not to be outdone, a TSL signing authority used 384 bit encryption but the key generator was limited to 8 bits. One key was literally the number 4. — arstechnica.com/security/202... [embedded post]
r/cryptography r on reddit
A CA used the number 4 as private key - disable these roots in your system now
r/malaysia r on reddit
Community Notice: Please Update Your Devices to Distrust all eMudhra Intermediate CA Certificates
r/crypto r on reddit
4
r/DailyTechNewsShow r on reddit
The Internet goes on high alert after discovery of 8 compromised TLS certs
r/programming r on reddit
Eight Bits of Trust; eMudhra's CA keys cracked in milliseconds
r/technology r on reddit
eMudhra Intermediate Certificate Authority Compromised
@bendesprets Ben Desprets on x
cloudflare: lava lamps for true randomness eMudhra:
r/developersIndia r on reddit
Indian certification authority eMudhra's private keys compromised - one of them was the number ‘4’
r/pcmasterrace r on reddit
The Internet goes on high alert after discovery of 8 compromised TLS certs
r/programminghorror r on reddit
TLS Key Signing Process at eMudhra: “Yes, I will do the needful”
r/programmingcirclejerk r on reddit
4

Chronicles