Lucene search

K
prionPRIOn knowledge basePRION:CVE-2016-1000343
HistoryJun 04, 2018 - 1:29 p.m.

Design/Logic Flaw

2018-06-0413:29:00
PRIOn knowledge base
www.prio-n.com
6

AI Score

6.8

Confidence

Low

EPSS

0.005

Percentile

77.4%

In the Bouncy Castle JCE Provider version 1.55 and earlier the DSA key pair generator generates a weak private key if used with default values. If the JCA key pair generator is not explicitly initialised with DSA parameters, 1.55 and earlier generates a private value assuming a 1024 bit key size. In earlier releases this can be dealt with by explicitly passing parameters to the key pair generator.