What baffles me in the eMudhra issue is the statement «a flaw in the code resulted in the second pair of keys being created onboard which were weaker» [1].
Sure, they had a KGC "script" and a possibly convoluted and unnecessary key wrapping thing going on. But what generates 'weaker keys' 🤔 An HSM?