eMudhra's weak CA keys are a preview of Q-Day, says PostQuantum

[Reacher Quarry]

A shocking security failure at an Indian certificate authority has been described as a rehearsal for Q-Day. The Register's Simon Sharwood first reported that the private keys behind eight eMudhra intermediate certificates were compromised. One of them was simply the number 4

Intermediate certificates are used to sign the certificates that protect websites. A proper P-384 private key should be a random 384 bit number. Instead, researcher Scott Helme and others found keys such as 4, 56, 115 and 237, which anyone could work out from the public certificates in under a second. That meant attackers could have forged HTTPS certificates for any website

The response was fast but uneven. PostQuantum's Marin Ivezic notes that Chrome blocked six intermediates within an hour and 40 minutes of the report, and Mozilla pushed an update the same evening. Apple, Android, Microsoft and Cloudflare followed over the next two days. About 30,000 certificates chain to the affected root, and eMudhra blamed a flawed script used in an April 2025 key ceremony

Cryptography engineer Filippo Valsorda called the clean up bigger than Heartbleed. Ivezic's argument is that this is what Q-Day would look like, but on a much larger scale. A powerful quantum computer could derive any RSA or elliptic curve key from its public certificate, and the same slow trust store update channels would be needed to respond

That comparison is sobering. Here, one certificate authority failed, and it still took days for every platform to react. If every authority's keys became vulnerable at once, the internet would face a crisis. It is a strong argument for moving to post quantum signatures well before Q-Day

How could a key as simple as 4 get through a certificate authority's checks? And is the internet ready for a mass key compromise?

eMudhra CA Key Failure Is a Q-Day Rehearsal for Web PKIpostquantum.com

Indian certification authority eMudhra's private keys compromised - one of them was the number '4'www.theregister.com