eMudhra intermediate CA keys were single-byte and factorable
Original title: Eight Bits of Trust; eMudhra's CA keys cracked in milliseconds
Eight April 2025 intermediates, also cross-signed by Sectigo, used P-384 private keys of one byte.
Scott Helme reports that eight eMudhra intermediate certificate authority private keys on the P-384 curve were single-byte values, including 4, 56 and 115, and could be recovered from public certificates in under a second. A researcher told Apple, Google, Microsoft, Mozilla and eMudhra on October 17. Chrome and Firefox blocked the intermediates; Mozilla later removed the eMudhra root, and Chrome said the root would enter Chrome Root Store v43. The eight CAs, six TLS and two code-signing, were created in April 2025 and cross-signed by Sectigo in May 2025. Non-browser TLS clients that skip revocation and Certificate Transparency remain exposed to forged certificates.
Unconfirmed: There is no way stated to know whether anyone recovered or used the keys during the 17-month window.
- Helme lists TLS private scalars 156, 230, 115, 56, 155 and 4, plus code-signing 66 and 237.
- Chrome said no TLS certificates chaining to these CAs appeared in Certificate Transparency.
- Mozilla shipped an NSS update removing the eMudhra root on October 20.
- curl, language runtimes and CI clients often do not check revocation or CT by default.
Impact: Anyone could recover CA private keys and forge certificates
| Product | Affected |
|---|---|
| eMudhra intermediate CA certificates | eight intermediates created April 2025, cross-signed May 2025 |
- 1.Update browser and OS trust stores that still include the eMudhra root or intermediates.
- 2.Treat non-browser TLS clients that do not check CT or revocation as still able to trust forged certs.
From the original article
7 min read at scotthelme.co.uk
One of eMudhra's certificate authority private keys is the number 4. Not a number that starts with 4, or the number 4 followed by a few hundred random digits, just, 4... Another one is 56, and another is 115.
By scotthelme.co.uk via pims · scotthelme.co.uk
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.