eMudhra’s 3-Bit Keys Expose Global TLS Trust to Forgery

A cryptographic failure inside an Indian certificate authority has left virtual private networks, enterprise infrastructure, and millions of internet-connected devices exposed to traffic interception. The compromised keys were so mathematically fragile that any attacker could crack them by testing a maximum of 256 numbers.

The incident centers on eMudhra, which disclosed that eight of its intermediate certificate authority certificates had been compromised. These intermediates chain directly to root programs trusted by Mozilla, Microsoft, Apple, and Chrome, according to security releases reviewed by Ars Technica. Because those roots are embedded in operating systems, browsers, and downstream trust stores used by hosting providers like Cloudflare, the blast radius extends far beyond eMudhra’s direct customers.

The technical failure is stark. Standard encryption relies on private keys of at least 384 bits. The compromised eMudhra keys measured 4, 56, 66, 115, 155, 156, 230, and 237 bits, with some reports indicating keys as small as three bits, according to Hacker News and other reports. A key of that size requires trivial computational effort to reverse-engineer. Once recovered, an attacker can forge valid domain certificates, impersonate legitimate servers, and silently intercept encrypted traffic.

eMudhra attributed the generation of these weak keys to a faulty script and has since revoked the eight certificates. But revocation does not guarantee safety across the broader internet.

Mozilla, Google, and Apple moved to block the compromised certificates within their respective browsers. The patchwork response leaves significant gaps. Mozilla security expert Dennis Jackson warned that a macOS utility continues trusting the compromised certificates because it fails to check for revocation information. That architectural blind spot applies to numerous other clients and legacy systems that do not actively poll certificate revocation lists.

The most immediate threat targets VPNs, particularly in jurisdictions where state-sponsored actors routinely attempt to intercept encrypted communications. Unmaintained servers and Internet of Things devices, which rarely receive manual security updates, face prolonged exposure. Cryptography engineer Filippo Valsorda told Ars the remediation effort will be “a massive cleanup job, bigger than Heartbleed,” referencing the 2014 OpenSSL vulnerability that forced a global overhaul of encrypted web traffic.

Network administrators are simultaneously managing a separate critical threat. The PHP Foundation announced it is releasing patches for two vulnerabilities rated 9.2 out of 10 on the severity scale, urging users to prepare for updates ahead of a scheduled 14:00 UTC release. Security firm watchTowr confirmed the flaw affects every version of the programming language from PHP 5 onward—dating back to 2004—and demonstrated a tool called PHP2Shell executing code on servers running WordPress, Drupal, MediaWiki, and Symfony. E-commerce security firm Sansec predicted mass attacks would begin within 15 minutes of the patch release.