Deedy alleges eMudhra used weak key generation that enables certificate forgery

Deedy (@deedydas) alleges that Indian certificate authority eMudhra generated 384-bit private keys from only eight small numbers (4, 56, 66, 115, 155, 156, 230, 237).

He says this would let attackers issue certificates for any website. In the same X post he calls the company a family business whose leaders lack technical backgrounds and describes its tech team as junior and underpaid, and he warns that AI could make such flaws easier to exploit. The report rests on Deedy's post alone; no eMudhra response or independent verification is cited.