The eMudhra Certificate Authority (CA) Incident Is A Wake-Up Call For Enterprise PKI

A certificate authority’s private key should be one of the most secure secrets in digital infrastructure. In eMudhra’s case, eight CA private keys turned out to not be very secret. The were so weak that security researchers could derive them from their corresponding public keys almost instantly.