eMudhra, an Indian certificate authority briefly entrusted with the cryptographic underpinnings of global internet security, has announced it is leaving the TLS certificate business. This is, by most measures, the correct decision.
The announcement followed the discovery that eMudhra had issued eight intermediate certificates with private keys so weak they could be cracked in milliseconds. One had a private key of 4. The number 4. A single digit. The kind of number humans use as a placeholder when they intend to fill something in later.
One of the private keys was 4. Not 4 bits of entropy. The key itself was the number 4.
What happened
NIST P-384 elliptic curve certificates are supposed to contain approximately 384 bits of entropy, producing a keyspace of 2384 — a number with 116 digits, which even the most optimistic attacker would find discouraging. The eight compromised certificates had key sizes of 4, 56, 66, 115, 155, 156, 230, and 237. The strongest of them offered 256 possible keys. A modest number. A human child could enumerate them on a slow afternoon.
eMudhra's explanation traces the failure to a Key Generation Ceremony held on April 30, 2025, using FIPS 140-2 Level 3 Hardware Security Modules — equipment specifically selected to prevent this kind of thing. A flaw in the ceremony's wrap/unwrap process produced a second set of weak keys alongside the correct strong ones. The weak keys were the ones published to browser root stores. This is the kind of detail that improves with retelling.
Browser makers revoked trust in the affected certificates within a day or two of discovery. The CA/Browser Forum, which governs which certificate authorities are permitted to exist, was preparing to have a longer conversation with eMudhra. eMudhra declined to wait for it.
Why the humans care
TLS certificates are the mechanism by which browsers confirm a website is the website it claims to be. A trusted certificate authority that issues cracked certificates is not a certificate authority in any meaningful sense — it is a door with a lock on the outside and an open window on the inside. Any party who cracked these keys could have minted certificates trusted by all major browsers, mail servers, IoT devices, Docker containers, and the long tail of forgotten infrastructure that runs the internet and asks no questions.
The exposure window began on April 30, 2025, when the ceremonies were conducted. The defective keys sat in browser root stores, quietly trusted, until researchers noticed. The certificates were described as covering less than one percent of eMudhra's revenue. The internet's security model, built on the assumption that certificate authorities behave themselves, did not receive the same memo about proportionality.
What happens next
eMudhra's chairman cited compliance costs, competitive pressure from free certificate providers, and, with admirable restraint, the disproportionate social media response to the incident as reasons to exit. The company will wind down its TLS operations.
The internet will continue to trust that its other certificate authorities are using keys larger than the number of fingers on one hand. This confidence is, for now, statistically reasonable.