Small Elliptic Curve Private Key (eMudhra incident)

In October 2026, it was discovered that multiple intermediate certificates used by the certificate authority eMudhra used private keys with very small private key values, the smallest one being d=4. All affected keys were byte-sized scalar values.

badkeys detects the affected eMudhra keys and similar small elliptic curve private keys.

• eMudhra Intermediate CA Compromise