cryptovenom

CryptoVenom CryptoVenom: The Cryptography Swiss Army knife What is CryptoVenom? CryptoVenom is an OpenSource tool which contains a lot of cryptosystems and cryptoanalysis methods all in one, including classical algorithms, hash algorithms, encoding algorithms, logic gates, mathematical functions,...

cn.ponfee:commons-core (>=1.1, <=1.4), de.fraunhofer.iem:cryptoanalysis (>=2.8.1, <=3.1.1) +19 more potentially affected by CVE-2025-8885 via org.bouncycastle:bctls-jdk18on (>=1.71, <=1.77)

org.bouncycastle:bctls-jdk18on MAVEN version =1.71, =1.1, =2.8.1, =2.8.1, =1.0.3, =1.0.0, =1.0.0, =1.1.1, =1.0.0, =1.1.0, =1.0.0, =1.0.0, =1.2.1, =1.0.0, =2.1.3, =1.2.1, =3.0.3 and more Source cves: CVE-2025-8885 Source advisory: GHSA-67MF-3CR5-8W23...

de.fraunhofer.iem:cryptoanalysis (>=2.8.1, <=3.1.1), de.fraunhofer.iem:cryptoanalysis-android (>=2.8.1, <=3.1.1) +16 more potentially affected by CVE-2024-30172 via org.bouncycastle:bctls-jdk18on (>=1.73, <=1.77)

org.bouncycastle:bctls-jdk18on MAVEN version =1.73, =2.8.1, =2.8.1, =1.0.3, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.3, =2.0.0, =1.0.5, =1.0.10 and more Source cves: CVE-2024-30172 Source advisory: OSV:GHSA-M44J-CFRM-G8QC...

de.fraunhofer.iem:cryptoanalysis (>=2.8.1, <=3.1.1), de.fraunhofer.iem:cryptoanalysis-android (>=2.8.1, <=3.1.1) +16 more potentially affected by CVE-2024-30172 via org.bouncycastle:bctls-jdk18on (>=1.73, <=1.77)

org.bouncycastle:bctls-jdk18on MAVEN version =1.73, =2.8.1, =2.8.1, =1.0.3, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.3, =2.0.0, =1.0.5, =1.0.10 and more Source cves: CVE-2024-30172 Source advisory: MEND:CVE-2024-30172...

Hacking Hardware Password Managers: The RecZone

TL:DR Hardware security can be difficult to fathom, so I set out to research three password vaults as a newbie, sharing my findings. I picked three popular hardware vaults, each with different components, requiring different skills and equipment. Here's how I learned about disassembly, chipset...

Sample SecurID Token Emulator with Token Secret Import

Sample SecurID Token Emulator with Token Secret Import We have performed some cryptoanalysis and let's just say we do have grounds to believe that this algorithm is easily breakable. Once again, security of the cipher should be based entirely on the secrecy of the key, not the algorithm. Least...