GeneralBreaking NewsBreakingLatest News
eMudhra Co-Founder Blames Script Error for Weak Crypto Keys, Claims No Damage Done
Sentiment: NeutralHigh Priority
What Happened?
eMudhra, an Indian digital certificate provider, faced a cybersecurity issue due to weak cryptographic keys. Co-founder Kaushik Srinivasan attributed the problem to a script error, asserting no significant damage occurred.
Key points
- eMudhra issued eight certificates with weak keys due to a script error.
- Mozilla and Google blocked the affected certificates shortly after the issue was reported.
- The weak keys could be recovered in seconds, posing a potential security risk.
- Srinivasan confirmed the issue stemmed from a key generation process on April 30, 2025.
- eMudhra is conducting a full internal audit to check for similar vulnerabilities.
- The Indian government stated the impact on its digital services was limited.
Key insights
- The incident may prompt eMudhra to enhance its security protocols.
- There could be increased scrutiny on digital certificate providers following this issue.
- Users may become more cautious about the security of digital certificates.
Why it matters
This incident highlights vulnerabilities in digital certificate security, which could affect user trust.
Entities
eMudhra· CompanyKaushik Srinivasan· PersonMozilla· OrganizationGoogle· OrganizationIndia· Country
Source
India Today
