The eMudhra Certificate Authority Incident Is A Wake-Up Call For Enterprise PKI

The private key of a certificate authority (CA) should be one of the most secure secrets in digital infrastructure. In eMudhra’s case, eight CA private keys turned out to not be very secret. In fact, they were so weak that security researchers could derive them from their corresponding public keys almost instantly.