Investigation Underway

The Ministry of Electronics and Information Technology (MeitY) has deployed a dedicated special investigative team to examine a recent security incident involving the Public Key Infrastructure (PKI) of digital trust provider eMudhra. The intervention follows online security concerns regarding vulnerabilities in certificate generation.

Despite the gravity of the preliminary disclosures, top government officials have sought to calm public apprehension. Authorities confirmed that the broader impact on Indian websites and applications has remained severely restricted both in scope and duration, ensuring that critical national infrastructure operations face no disruption.

Addressing Vulnerabilities

At the heart of the technical inquiry are disclosures indicating that cryptographic keys associated with eight of eMudhra's intermediate certificate authorities were generated using weak parameters. In theoretical cybersecurity scenarios, compromised or weak intermediate keys could allow unauthorized entities to forge certificates, masquerading fraudulent web portals or software packages as verified trusted entities.

Secure web infrastructure relies entirely on these cascading digital certificates to validate secure connections between users and servers. However, MeitY's immediate containment measures and expert review have preemptively neutralized widespread risks.

Curbing Misinformation

Addressing social media discourse surrounding the vulnerability, the government explicitly condemned accounts engaging in unwarranted panic and speculation.

"MeitY has taken serious note of the reported incident. A special team has been constituted to investigate the matter," the official communication noted. The ministry reiterated that eMudhra's core Digital Signature Certificate (DSC) and eSign services continue to function without compromise, safeguarding regular business and government electronic transactions.

Reporting by Gaurav Sen for Daily News 365.