eMudhra intermediate CA private keys leaked, Chrome and Firefox issue emergency blocks

On October 21, Google and Mozilla separately announced on October 20 that the private keys of eight intermediate CA certificates belonging to Indian certificate authority (CA) eMudhra had been cracked due to flaws and insufficient randomness in the key generation process. In theory, attackers could use this to forge HTTPS certificates for any website and carry out man-in-the-middle attacks. Within hours of receiving the report on October 17, the two companies blocked the relevant certificates via CRLSet and OneCRL respectively, requiring no browser update or restart; Android devices have also received equivalent updates through Google Play services. Google stated that no TLS certificates linked to these CAs were found in CT logs before the block. In addition, Chrome will remove the emSign ECC Root CA - G3 from its root certificate store starting October 27 Pacific Time, and Mozilla has also removed the root certificate that issued the above intermediate certificates. Websites using this certificate chain need to replace their certificates as soon as possible.