eMudhra Security Vulnerability: Google, Apple Block Digital Certificates Over Weak Keys

A security vulnerability has been identified in eight intermediate digital certificates issued by Indian digital trust and cybersecurity firm eMudhra. Researchers discovered that these certificates contained weak secret cryptographic keys, prompting major technology companies to act swiftly.

Tech giants including Google, Apple, Microsoft, and Mozilla immediately blocked the affected certificates to prevent potential cyber risks, such as the creation of fake websites to compromise user data.

eMudhra explained that a technical flaw during the key-generation process caused the creation of these weak secret keys. However, the company and researchers confirmed that no cyberattacks or data breaches have occurred exploiting this vulnerability.

eMudhra assured that its primary root CA keys remain entirely secure and that there was no breach of company data or infrastructure. Additionally, the company clarified that Digital Signature Certificates (DSC) and e-Sign services used across India remain completely safe and unaffected.