The eMudhra private-key leak should concern India for reasons beyond technical failure. Eight intermediate certification authority keys were found to have been generated with extraordinarily weak cryptographic randomness, with one reportedly being No. 4.
How it chose a number requiring only 3 bits, when the key size should be greater than 384 bits, is not a process gap but a failure of trust. This incident tests whether India's digital trust architecture can withstand a global scale.
