WORLD BUG REPORTRecording the planet's bugs
Something’s off.
NEW0SINCE LAST VISIT
WBR-20261023-002

Certificate issuer reportedly exits global SSL/TLS after a private key was “4”

TECHNOLOGY & SOFTWARENEEDS REVIEWUpdated:

A certification authority, eMudhra, is reported to be leaving the global SSL/TLS certificate business after reports said one of its published private-key values was simply “4.” The report says eight intermediate certificate authorities had weak values ranging from 4 to 237, while eMudhra said a flaw in a key-generation ceremony had produced weak keys alongside intended strong ones.

Certificate issuer reportedly exits global SSL/TLS after a private key was “4”

A key meant to protect signatures reportedly had a one-digit value

The strange part is that private keys are meant to protect certificate signing, yet the reported value could be guessed as an ordinary single-digit number. eMudhra reportedly said it revoked the affected authorities within 14 hours, that they had issued no end-entity certificates, and that it will wind down the global business while continuing some services during customer transitions.

Verification

UNVERIFIED

Feed metadata identifies a report, not independently verified underlying facts.

This is a source-attributed report that has not been independently verified.

Sources

SHARE