eMudhra’s weak private keys allow attackers to recover certificates, exposing digital trust infrastructure. Researchers found eight keys with insufficient entropy, enabling brute‑force recovery. The flaw threatens all certificates issued by eMudhra, prompting Google and Mozilla to intervene. Developers should audit key generation and enforce stronger entropy to protect trust chains.
Opening Kapyn…