Overview
- Security teams confirmed a researcher reported and proved the compromise on Saturday, October 17 by signing a test message with each of the eight intermediate private keys.
- The private keys were generated with almost no randomness so they could be recovered by testing tiny integers; researchers published examples showing some keys were as small as 4.
- Major browser and platform vendors rapidly protected users by blocking the affected intermediates—Chrome via a CRLSet/SPKI block, Firefox via OneCRL, and Apple and Microsoft with equivalent protections—and Chrome plans to remove the emSign ECC Root CA - G3 from its root store.
- A wide range of software maintainers have issued updates or patches (for example, Go, certifi, NSS and Rust webpki-roots) but many non‑browser clients, language runtimes, embedded devices and system trust stores that do not consume revocation feeds remain vulnerable until their bundles or binaries are updated or rebuilt.
- eMudhra has revoked the eight intermediates and opened an investigation into a key‑generation script error dating to April 2025, and some customers may need to replace certificates that chain to the affected root as vendors continue remediation.