The private keys of eMudhra, an Indian certification authority, were compromised, exposing sensitive numbers like '4' and '56'.
Claims
The private keys of eMudhra, an Indian certification authority, were compromised, exposing sensitive numbers like '4' and '56'.
Parent: CybersecurityEntity: eMudhraImpact: negativeDate: Oct 21, 2026 - Oct 23, 2026Target: The security of eMudhra's private keys
Source posts
Finding out that one of the private keys of eMudhra, an Indian certification authority which has issued 60 million certificates, was simply the number ‘4’
6 boosts · 11 favs · 0 replies · Oct 23, 2026
Indian certification authority eMudhra’s private keys compromised – one of them was the number ‘4’ https://www.theregister.com/security/2026/10/20/indian-certification-authority-emudhras-private-keys-compromised-one-of-them-was-the-number-4/5304312
Massive clean-up job under way because this mess makes it possible to impersonate any website or service
---
54 uses from 52 accounts #toplink
0 boosts · 0 favs · 0 replies · Oct 21, 2026
#toplink
Indian certification authority eMudhra’s private keys compromised – one of them was the number ‘4’
> “Not a number that starts with 4, or the number 4 followed by a few hundred random digits, just, 4... Another one is 56, and another is 115. I know, because I recovered all of them from their public certificates on my laptop just now, and it took less than a second,” Helme wrote
> Other researchers have found private keys including the numbers 66, 155, 156, 230 and 237
https://www.theregister.com/security/2026/10/20/indian-certification-authority-emudhras-private-keys-compromised-one-of-them-was-the-number-4/5304312
0 boosts · 0 favs · 0 replies · Oct 22, 2026