eMudhra to Exit Global TLS Certificate Business Following Security Flaw
India-based certificate authority eMudhra has announced its withdrawal from the global SSL/TLS certificate business. The decision follows the discovery of eight intermediate TLS certificates issued by the company that contained critically weak private encryption keys. These keys, which ranged from 3 to 8 bits in size, were trivial to crack, potentially allowing unauthorized parties to generate trusted certificates for any website or server. The company attributed the flaw to a script error during a Key Generation Ceremony, which inadvertently produced a second set of weak keys alongside the intended ones. While browser makers have blocked the affected certificates, the company cited increasing compliance costs, low revenue contribution, and intense public scrutiny as primary drivers for its exit from the market.
Key points
- eMudhra is exiting the global SSL/TLS certificate market.
- Eight intermediate certificates were issued with defective private keys ranging from 3 to 8 bits.
- The flaw originated from a script error during a Key Generation Ceremony.
- Browser makers have already blocked the compromised certificates.
- The company cited compliance costs and low business returns as factors in its decision.
What happened
eMudhra, an India-based certificate authority, announced it is withdrawing from the global SSL/TLS certificate business. This decision follows the revelation that the company issued eight intermediate TLS certificates with private encryption keys so weak they were trivial to discover and crack.
The compromised certificates were intended to have 384 bits of entropy but instead contained keys ranging from 3 to 8 bits. This vulnerability allowed for the potential generation of fraudulent certificates trusted by major browsers and various server types.
What changed
The company identified the root cause as a flaw in a script used during a Key Generation Ceremony. According to eMudhra, a test of wrap/unwrap procedures resulted in the creation of a second, weaker set of keys that were mistakenly published to browser root stores.
Browser makers have blocked the affected intermediate certificates. However, the company noted that while the immediate threat is mitigated for browsers, other devices such as embedded systems may remain vulnerable if they cannot be updated to block the compromised certificates.
Availability and future outlook
eMudhra stated that the SSL/TLS business accounted for only 1 percent of its revenue. The company plans to focus on other products and services, citing the increasing costs of compliance and the emergence of free certificate providers as factors that reduced the business's return on investment.
The company is currently conducting a review of its key lifecycle integrity processes and intends to reverify every key ceremony performed to date over the coming week.
Why it matters
The incident highlights the risks of human error in cryptographic key management, as weak keys can undermine the security of global web infrastructure.
What we know
- eMudhra is exiting the global SSL/TLS certificate business.
- The company issued eight intermediate TLS certificates with defective private keys.
- Browser makers have blocked the affected certificates.
- The company is conducting a review of its key ceremony processes.
What remains unclear
- The full extent of unmaintained or embedded devices that may remain vulnerable to the compromised certificates is unknown.
- The exact timeline for the completion of the company's internal investigation into code and process gaps remains subject to ongoing work.
