eMudhra, a startup known for its SSL/TLS certificate services, has faced a significant setback due to a technical fault during the wrap-unwrap process, resulting in a weak key being created. This weak key can be easily reverse-engineered using modern AI tools and scripts, leading to global headlines and the Indian government's formation of a committee to investigate the situation. The company has decided to voluntarily withdraw from the global SSL/TLS certificate business, and affected certificate authorities have been revoked within 14 hours of discovery. No end-entity certificates have been issued through the affected certificate authorities.
Key points
eMudhra, a startup known for its SSL/TLS certificate services, has faced a significant se…: eMudhra, a startup known for its SSL/TLS certificate services, has faced a significant setback due to a technical fault during the wrap-unwrap process, resulting in a weak key being created.
This weak key can be easily reverse-engineered using modern AI tools and scripts, leading…: This weak key can be easily reverse-engineered using modern AI tools and scripts, leading to global headlines and the Indian government's formation of a committee to investigate the situation.
The company has decided to voluntarily withdraw from the global SSL/TLS certificate busin…: The company has decided to voluntarily withdraw from the global SSL/TLS certificate business, and affected certificate authorities have been revoked within 14 hours of discovery.
Sources checked by our analysis pipeline: 1
A technical fault, a script error during the wrap-unwrap process resulted in a weak key. The key was conformant to all the standards, but a weak key could be reverse engineered using modern AI tools and scripts that run mathematical algorithms, co-founder Kaushik Srinivasan of eMudhra told ET in an interview defending the incident that made global headlines and led the Indian government to form a committee to investigate.“It was just a bad day.
Business NewsTechStartupsApril 2025 script error left eMudhra keys exposed to AI: cofounder Kaushik Srinivasan
April 2025 script error left eMudhra keys exposed to AI: cofounder Kaushik Srinivasan
Synopsis
eMudhra’s board has decided to voluntarily withdraw from the global Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificate business. The company said affected certificate authorities were revoked within 14 hours of discovery and no end-entity certificates had been issued through them.
Japan plans to simulate cyberattacks using AI to identify weaknesses in technology systems, as PHP flaws cause widespread disruptions. The government and companies worldwide experienced website outages and emergency alerts due to the critical vulnerabilities in the widely used programming language. Cybersecurity experts have warned that AI is helping attackers automate tasks, making cybercrime faster, cheaper, and harder to detect. Japan has been too comfortable with its existing infrastructure, which it felt was…
The article critiques the "hustle culture" and "winner takes all" mentality in Silicon Valley, arguing that these values are unsustainable. The author advocates for a slower, more collaborative approach and emphasizes building things people love. The article criticizes venture capitalists and warns of startup risks.
have secured approval to deploy AI models overseas, part of a wave of homegrown AI technologies that Beijing is promoting. The approval comes as the Chinese government is implementing stricter export controls, including the requirement to register and obtain approval for AI models before they can be exported. This move is seen as a response to the growing global competition in the AI sector and a push for self-reliance in the technology domain.