eMudhra CA key generation flaw let attackers forge trusted TLS and code-signing certificates
Cisco Talos disclosed that eight intermediate certificates issued by certificate authority eMudhra were generated with critically weak private keys during an April 2025 key ceremony — some had only 3 to 8 bits of entropy instead of the required 384. This made the private keys trivial to recover, letting an attacker impersonate any TLS website or forge code-signing certificates trusted under those chains. Chrome, Mozilla and Apple have blocked the six affected TLS certificates; Microsoft has blocked the two code-signing certificates. eMudhra has revoked the certificates and stopped issuing new ones under its G3 root, and the Go team shipped Go 1.27.3 and 1.26.10 (CVE-2026-111943) to explicitly block the compromised keys since Go runs its own certificate validation and doesn't always defer to platform revocation.