Overview
- A security researcher reported the flaw on Saturday and demonstrated control by signing a test message with each of the eight compromised intermediate keys.
- The private keys were generated with insufficient randomness — single-byte values such as 4, 56 and 115 — making each key recoverable in under a second from its public certificate.
- Chrome and Firefox pushed blocks within hours of the report and Apple and Microsoft followed, while Mozilla and others removed the emSign ECC Root CA - G3 from some trust stores and Google plans a Chrome root removal rollout around October 27.
- Many downstream projects released fixes that either block the compromised public keys or remove the parent root, but devices, embedded systems and apps that do not get updates or do not enforce revocation remain exposed.
- Indian regulators and multiple root programs are investigating eMudhra’s April 30, 2025 key-ceremony error as the company says the incident affected only those intermediates, revoked them, and that its root keys and core domestic services were not compromised.