Errors in mp_div and mp_exptmod cryptographic functions in NSS

2016-01-26T00:00:00
ID MFSA2016-07
Type mozilla
Reporter Mozilla Foundation
Modified 2016-01-26T00:00:00

Description

Security researcher Hanno Böck reported that calculations with mp_div and mp_exptmod in Network Security Services (NSS) can produce wrong results in some circumstances. These functions are used within NSS for a variety of cryptographic division functions, leading to potential cryptographic weaknesses.