This discussion on their inclusion in Mozilla is quite revealing:
https://bugzilla.mozilla.org/s...
Elsewhere it's claimed that they used a FIPS HSM to generate their keys.
I did not see who their auditor was.
Did eMudhra lie?
Did the auditor lie?
Are FIPS HSM's backdoored?
Do we have another Dual_EC_DRBG situation on our hands here?
If nobody is lying we could have just seen a huge cyberwar or false flag averted. Essential crypto gear could be totally buggered still.
PS Remember when Mozilla gave CACert absolute hell for years when they were tremendously more competent?