CVE-2021-26322

Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”...