552 matches found
securesystemslib
securesystemslib Securesystemslib es una interfaz de criptografía para firmar y verificar firmas digitales. Está desarrollado para los proyectos TUF e in-toto: los contenedores de claves y firmas son compatibles con los formatos de metadatos de esos proyectos. Internamente, Securesystemslib puede...
ECC_Attacks
Ataques conocidos a la criptografía de curvas elípticas Introducción Introducción a las curvas elípticas Curvas elípticas en el contexto de la criptografía Ataques ECC Ataques ECDH El orden del generador es demasiado pequeño El orden del generador es un número liso El orden del generador es casi ...
libsodium
Sodium 是一个易于使用的软件库，提供了广泛的加密操作，包括加密、解密、数字签名和安全密码哈希。 它是 NaCl 的一个可移植、可交叉编译、可安装、可打包的分支。在保持 API 兼容性的同时，libsodium 扩展了功能，以提高可用性并简化安全应用程序的开发。 主要特性 加密与解密： 使用现代算法安全地加密和解密数据。 数字签名： 创建和验证签名，确保数据真实性。 跨平台兼容性： 支持 Windows（MinGW 和 Visual Studio，x86、x64 和 arm64）、iOS、Android、JavaScript 和 WebAssembly。 用户友好的 API：...
liboqs
liboqs liboqs is an open source C library for quantum-safe cryptographic algorithms. liboqs Overview Status Supported Algorithms Key encapsulation mechanisms Signature schemes Stateful signature schemes Limitations and Security Platform limitations Support limitations Quickstart Linux and Mac...
Crypton
Crypton Crypton 是一个教育库，用于学习 和实践 进攻与防御密码学。它本质上是一个集合，包含了各种加密系统（对称和非对称）、数字签名、消息认证码和认证加密系统中现有漏洞和攻击的解释与实现。每种攻击还附带了来自“夺旗”（CTF）竞赛的示例挑战及其相应解析。已经熟悉该领域（或参与 CTF）的个人可以将 Crypton 作为工具，基于特定现有漏洞解决挑战。 该库将持续更新攻击解释和 CTF 挑战！如有任何建议，请随时给我发邮件。...
Astra Linux – Vulnerability in LibreOffice
LibreOffice supports digital signatures for ODF documents and macros within documents. It provides visual aids to indicate that the document has not been altered since the last signature, and that the signature is valid. A vulnerability in certificate validation in LibreOffice allowed attackers t...
CVE-2026-16230
The Formidable Digital Signatures plugin for WordPress is vulnerable to file deletion due to insufficient file path validation in the deletefile function in all versions up to, and including, 3.0.6. This makes it possible for unauthenticated attackers to delete files on the server by supplying an...
CVE-2026-16230
The CVE concerns the Formidable Digital Signatures plugin for WordPress, where the delete_file function fails to validate file paths in all versions up to 3.0.6. This allows unauthenticated attackers to delete files on the server by submitting an attacker-controlled filename via item_meta[field_i...
EUVD-2026-56928
The Formidable Digital Signatures plugin for WordPress is vulnerable to file deletion due to insufficient file path validation in the deletefile function in all versions up to, and including, 3.0.6. This makes it possible for unauthenticated attackers to delete files on the server by supplying an...
CVE-2026-16230
The Formidable Digital Signatures plugin for WordPress is vulnerable to file deletion due to insufficient file path validation in the deletefile function in all versions up to, and including, 3.0.6. This makes it possible for unauthenticated attackers to delete files on the server by supplying an...
CVE-2026-16230 Formidable Digital Signatures <= 3.0.6 - Unauthenticated Arbitrary File Deletion via Signature Field
The Formidable Digital Signatures plugin for WordPress is vulnerable to file deletion due to insufficient file path validation in the deletefile function in all versions up to, and including, 3.0.6. This makes it possible for unauthenticated attackers to delete files on the server by supplying an...
PT-2026-70887
The Formidable Digital Signatures plugin for WordPress is vulnerable to file deletion due to insufficient file path validation in the delete file function in all versions up to, and including, 3.0.6. This makes it possible for unauthenticated attackers to delete files on the server by supplying a...
Thermo Fisher Patches Forensic DNA File Tampering Flaw in Its Software
Thermo Fisher patched CVE-2026-17583 in five supported DNA analysis products by adding digital signatures that help laboratories detect modified forensic files...
Thermo Fisher Patches Flaw That Could Make DNA File Tampering Nearly Undetectable
Thermo Fisher Scientific has patched a flaw in select Applied Biosystems human identification software that could allow data files to be altered before analysis software loads them. The vendor's July 31 security bulletin says nearly undetectable changes to .fsa and .hid outputs could occur if...
github.com/sigstore/sigstore-go: sigstore-go: Signature bypass allows acceptance of bundles signed with expired keys
A flaw was found in sigstore-go, a software library used for verifying digital signatures. This vulnerability specifically affects the workflow for self-managed long-lived signing keys that do not use certificates. An attacker who possesses an expired signing key can exploit this by creating and...
CVE-2026-52688
RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...
Trump Order Sets 2030 Deadline for Federal Post-Quantum Crypto Migration
President Trump signed an executive order on June 22 setting hard deadlines for federal agencies to move high-value assets and high-impact systems to post-quantum cryptography. Key establishment must move by December 31, 2030; digital signatures by December 31, 2031. EO 14409 leaves national...
`pqcrypto` is unmaintained: upstream PQClean project being archived
The pqcrypto crate and the entire pqcrypto- ecosystem wrap C implementations from PQClean. The PQClean project is being archived in or after July 2026 see PQClean/PQClean604, after which no further security patches, algorithm updates, or bug fixes will be applied to the upstream implementations. ...
RUSTSEC-2026-0164 `pqcrypto` is unmaintained: upstream PQClean project being archived
The pqcrypto crate and the entire pqcrypto- ecosystem wrap C implementations from PQClean. The PQClean project is being archived in or after July 2026 see PQClean/PQClean604, after which no further security patches, algorithm updates, or bug fixes will be applied to the upstream implementations. ...