Pakistan National CERT warns of eight compromised eMudhra security keys

Pakistan’s National Cyber Emergency Response Team (National CERT) issued a critical warning regarding eight compromised security keys used by eMudhra’s emSign service. Six of these compromised keys were designated for Transport Layer Security (TLS) certificates, while two were used to verify software through code signing.
The private keys involved utilized the ECDSA P-384 cryptographic method but were generated with insufficient randomness. Mozilla independently recovered the keys within hours of the initial report.
No malicious exploitation had been publicly confirmed at the time the advisory was released. Google stated that no TLS certificates linked to the six compromised intermediates appeared in Certificate Transparency logs before the certificates were blocked.
National CERT warned against removing root certificates indiscriminately.































