Eight web security keys of firm used by Govt. and PSUs leaked

Eight private keys used to issue web security certificates by Bengaluru-headquartered eMudhra Ltd. have been leaked, sending security teams at major internet browser and operating system developers around the world scrambling to patch their systems to stop trusting the affected certificates.

The extraordinary development comes as several government websites use a range of eMudhra’s keys to “sign” their security certificates, which is practically necessary for any website to display on a modern browser.

These “intermediate” security certificate keys had a glaring flaw, according to an anonymous researcher who alerted major internet infrastructure firms over the last few days. The uncovered flaw boiled down to this: instead of using a 384-bit private key, these intermediate certificates just had a numerical key that was between 1 and 256, making it orders of magnitude easier to infer them. Public key cryptography, such as that used in web security certificates, or SSL certificates, relies on private keys staying unknown to any outside entities under all circumstances. One of the keys was just the number 4. 

Dennis Jackson, who was involved in Mozilla’s response to the incident, said that eMudhra’s private keys were “trivial to exploit,” adding that “6 of the impacted certificates are for TLS and trusted by the Chrome, Mozilla, Microsoft and Apple root programs”. eMudhra revoked the affected certificates.

“Upon becoming aware of the incident, eMudhra initiated its incident response procedures, took measures to contain the affected certificates, and began working closely with browser and root-store operators to safeguard users and maintain the integrity of the broader WebPKI ecosystem,” eMudhra said in an update posted on its website.

“Importantly, none of the affected intermediate CAs were deployed in production, with the exception of one,” eMudhra said, without identifying which one it was. “Furthermore, none of these intermediate CAs, including the one deployed in production, have issued any end-entity certificates. This has been confirmed through our internal analysis and corroborated by publicly available Certificate Transparency records.”

Yash Kadakia, founder of the Security Brigade cybersecurity firm, said that the impact of this leak, even if patched on browsers, could extend to internet-of-things (IoT) devices that are not frequently patched to address certificate compromise incidents like this. “The cleanup could be enormous, particularly for devices and software that cannot be easily updated,” Mr. Kadakia said.

Many government websites, including the Aadhaar issuer UIDAI and the income tax filing portal, use eMudhra certificates or other technology from the firm.

Also read: In push for made-in-India browser, a mandate to trust government encryption

The Hindu has reached out to the Ministry of Electronics and Information Technology (MeitY), under which the Computer Emergency Response Team, India and the Controller of Certifying Authorities (CCA) — which regulate Indian certificate authorities — sit. This story will be updated if the government issues a response.

There is no indication that eMudhra’s root certificates itself — which sit above the tier that was leaked — have been compromised. Global browsers have been reluctant to trust Indian root certificate authorities since “rogue” certificates were issued in December 2014 by the National Informatics Centre’s root authority. eMudhra is the sole Indian root certificate authority trusted globally.

In 2023, MeitY launched the Indian Web Browser Development Challenge to solicit the development of an Indian-made browser that would trust root CAs by the CCA, which the main web browsers today block. Zoho Corp’s Ulaa won the challenge, winning ₹1 crore.