MAC Forgery Vulnerability

Bouncy Castle for Java is vulnerable to a MAC forgery vulnerability. The vulnerability is due to improper handling of the KDF key split based on message length, which allows an attacker to forge the MAC and potentially modify or authenticate manipulated ciphertext without detection...