eMudhra to Exit SSL/TLS Market After 8 CA Keys Found Easily Guessable

https://hackread.com/wp-content/uploads/2026/10/emudhra-exit-ssl-tls-market-8-ca-keys-guessable.jpg

Indian digital trust company eMudhra plans to leave the global SSL/TLS certificate market after eight of its intermediate certificate authorities were found to have easily guessable private keys.

The issue was reported on October 17, 2026, by a researcher identified as Wayne, who reported it to Mozilla. Mozilla independently recovered the keys, and security researcher Scott Helme later demonstrated the weakness in a public analysis, recovering all eight in less than a second. The keys were generated as small numbers rather than the large, unpredictable values expected for cryptographic security, and were created in April 2025.

Discover more

Read Daily News

Find Legal Aid

“The eight intermediates are six TLS issuing CAs (DV, OV and EV, two generations each) and two code-signing CAs, all created in April 2025. Every one of them was also cross-signed by Sectigo’s AAA Certificate Services root in May 2025,” Helme explained in his blog post...

Copyright of this story solely belongs to hackread.com. To see the full text click HERE