Skip to footer
Venu Srinivasan - Wikipedia
Photo: Jishnuzz, CC BY-SA 3.0, via Wikimedia Commons

tech

eMudhra Exits Global SSL TLS Business After Security Breach

eMudhra is exiting the global SSL/TLS business following a security breach involving weak cryptographic keys.

Updated 1 min read

eMudhra announced its withdrawal from the global SSL/TLS certificate business on October 22. Co-founder Kaushik Srinivasan attributed the exit to a human and script error during a key-generation ceremony on April 30, 2025, which created recoverable weak keys. Chairman V. Srinivasan noted the business contributed only 1% of global revenue and faced rising operational costs and free competition.

Latest updates

eMudhra Exits Global SSL TLS Business After Security Breach

The company's board announced the exit on October 22 after a 'weak-key' incident occurred. Co-founder Kaushik Srinivasan attributed the breach to a one-off human and script error. The global SSL/TLS business contributed approximately 1% of the company's total revenue. The decision follows concerns over the recoverability of cryptographic keys.

eMudhra exits global security certificate business after trust withdrawal

eMudhra is exiting its global business of issuing security certificates for websites, including the Indian income tax portal. The move comes after tech giants Google, Apple, and Microsoft withdrew trust in certificates weakened by a software error. The company stated it has revoked eight affected certificates and detected no data breach. eMudhra clarified that its Indian digital signature services remain unaffected by this incident.

Sources