eMudhra will exit the global SSL/TLS certificate business after a script error in April 2025 exposed keys to AI risks. Cofounder Kaushik Srinivasan said, "It was just a bad day." The company revoked affected authorities within 14 hours, ensuring no end-entity certificates were issued. The government is now investigating.
eMudhra's board has decided to voluntarily withdraw from the global Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificate business. The company said affected certificate authorities were revoked within 14 hours of discovery and no end-entity certificates had been issued through them.
A technical fault, a script error during the wrap-unwrap process resulted in a weak key. The key was conformant to all the standards, but a weak key could be reverse engineered using modern AI tools and scripts that run mathematical algorithms, co-founder Kaushik Srinivasan of eMudhra told ET in an interview defending the incident that made global headlines and led the Indian government to form a committee to investigate."It was just a bad day.