Eight bits of trust: eMudhra's CA keys cracked in milliseconds
All eight compromised eMudhra intermediate CA keys turn out to be P-384 private keys made of 47 zero bytes and a single random byte (one is literally the number 4), so anyone could recover them from the public certificates in at most 255 tries. The six TLS and two code-signing CAs, all cross-signed by Sectigo, sat exposed from April 2025 until browsers blocked them this week.