eMudhra密钥生成严重缺陷导致中间证书失信

安全研究员Wayne于2026年10月17日20:06 UTC向Mozilla、Chrome、Apple和Microsoft报告了eMudhra公司的一起重大密钥泄露事件1。该事件源于eMudhra在2025年4月30日的密钥生成仪式中出现的严重漏洞，导致8个中间证书的P-384私钥生成异常，所有私钥均小于256位，可被瞬间恢复1。这8个证书中包括6个用于TLS和2个用于代码签名，影响了约30,000个证书，其中97%来自ACME1。

Mozilla于2026年10月17日22:59 UTC完成了Firefox中这些证书的不信任流程1。eMudhra于当日21:29 UTC承认了问题，声称系密钥生成仪式（KGC）脚本缺陷导致在Wrap/Unwrap测试过程中生成了第二组弱密钥1。

Mozilla于10月20日向eMudhra发送了详细问卷要求其在24小时内回应，但截至10月23日eMudhra未按期提交答复1。eMudhra随后将未及时回应归咎于社交媒体的舆论压力1。此后，eMudhra宣布退出全球SSL/TLS证书业务1。

A critical flaw in eMudhra's certificate key generation process has triggered a widespread trust revocation across major browsers. During a key generation ceremony on April 30, 2025, the company produced eight intermediate certificates with severely compromised P-384 private keys that could be instantly recovered, with all private keys remaining below 256 bits in strength 1. Six of these certificates were used for TLS operations while two were deployed for code signing, collectively affecting approximately 30,000 certificates, 97 percent of which were issued through ACME 1.

Security researcher Wayne disclosed the vulnerability to Mozilla, Chrome, Apple, and Microsoft on October 17, 2026, at 20:06 UTC 1. Mozilla acknowledged the issue within hours and completed the distrust process for affected certificates in Firefox by 22:59 UTC the same day 1. eMudhra admitted to the problem at 21:29 UTC and launched an internal investigation 1. However, the company failed to meet a critical deadline when Mozilla sent a detailed questionnaire on October 20 requiring a response within 24 hours; as of October 23, eMudhra had not submitted answers 1. The company attributed the incident to a defect in the key generation ceremony script that produced a second set of weak keys during Wrap/Unwrap testing phases 1. This incident followed a prior issue documented in Mozilla bug 1970728, where intermediate certificates from the same batch had their certificate revocation list signed with incorrect keys 1. Following the controversy, eMudhra subsequently announced its withdrawal from the global SSL/TLS certificate business 1.