Trusted Intermediate CA key "leak"

[chants]

No joke, the private key was made with d=4 issued 30 April 2025. P-384 elliptic curve and eight intermediate Certificate Authority (CA) private keys belonging to eMudhra are compromised.

https://chaos.social/@fluepke/117474156947559280

Supporting material:

https://gist.github.com/Fluepke/9a103c7f990c3cc2fb5002f7476f2f48

8 compromised keys:

https://github.com/Fluepke/emudrahahahahaha

I didnt believe it at first that d=4, actually is funny. Apparently some like Google have already pushed an emergency revocation.