IT Services Circle

Oct 25, 2026 · Information Security

CA Private Key Was Just '4': How eMudhra's Script Bug Broke Global HTTPS Trust

Indian CA eMudhra generated intermediate certificate private keys as trivial integers like 4 due to a script bug, allowing anyone to forge trusted certificates; major browsers and OSes emergency-revoked trust, impacting 60M+ certificates and forcing developers to audit trust stores and key generation practices.