wolfCOSE

wolfCOSE wolfCOSE — это легковесная C-библиотека, реализующая CBOR RFC 8949, COSE RFC 9052/9053 и пост-квантовый ML-DSA для COSE RFC 9964 с использованием wolfSSL в качестве криптографического бэкенда. Основные возможности Полный набор сообщений RFC 9052 : все шесть типов сообщений COSE, включая...

ecdsa-private-key-recovery

ecdsa-key-recovery ECDSA 및 DSA Nonce 재사용 개인 키 복구 공격 수행 서명 취약점 분석을 위한 암호화 연구 도구 동일한 nonce k를 공유하는 두 서명에 대한 개인 키를 복구해 봅시다. 동일한 nonce k를 선택하면 두 서명 모두 동일한 서명 값 r을 갖게 된다는 점에 유의하세요. ECDSA nonce 재사용의 좋은 후보를 찾으려면 서로 다른 메시지또는 해시에 대해 동일한 r, pubkey, curve를 공유하는 서명을 확인하세요. 예를 들어 bitcoind 기반 블록체인 프로젝트는 일반적으로...

cryptovenom

CryptoVenom CryptoVenom: The Cryptography Swiss Army knife What is CryptoVenom? CryptoVenom is an OpenSource tool which contains a lot of cryptosystems and cryptoanalysis methods all in one, including classical algorithms, hash algorithms, encoding algorithms, logic gates, mathematical functions,...

dsa

Go의 crypto/dsa 취약점CVE-2016-3959 요약 Alex Mullins 2016년 4월 9일 소개 최근 Go 프로그래밍 언어용 DSADigital Signature Algorithm 암호 라이브러리에서 버그가 발견되었습니다. 이 글에서는 버그의 세부 내용과 공격자가 이를 이용하여 기본 DSA 라이브러리를 사용해 클라이언트를 인증하는 표준 Go SSH 서버에 대해 서비스 거부 공격을 시작할 수 있는 방법을 살펴보겠습니다. 이 취약점에 대한 첫 번째 언급은 Open Source Securityoss-sec 메일링...

CVE-2026-80999

A flaw was found in the Linux kernel's Realtek Digital Subscriber Line DSA driver. The driver incorrectly uses gpiodsetvalue instead of gpiodsetvaluecansleep for reset GPIO operations. This can lead to system warnings when the reset GPIO is managed by a sleeping controller, potentially causing...

AZL-100343 CVE-2026-80999 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: net: dsa: realtek: use gpiodsetvaluecansleep for reset GPIO rtl83xxresetassert and rtl83xxresetdeassert are only called from the probe path, which may sleep and is not timing-critical. When the reset GPIO is provided by a sleepin...

DEBIAN-CVE-2026-80999

In the Linux kernel, the following vulnerability has been resolved: net: dsa: realtek: use gpiodsetvaluecansleep for reset GPIO rtl83xxresetassert and rtl83xxresetdeassert are only called from the probe path, which may sleep and is not timing-critical. When the reset GPIO is provided by a sleepin...

CVE-2026-80999

In the Linux kernel, the following vulnerability has been resolved: net: dsa: realtek: use gpiodsetvaluecansleep for reset GPIO rtl83xxresetassert and rtl83xxresetdeassert are only called from the probe path, which may sleep and is not timing-critical. When the reset GPIO is provided by a sleepin...

CVE-2026-80999

In the Linux kernel, the following vulnerability has been resolved: net: dsa: realtek: use gpiodsetvaluecansleep for reset GPIO rtl83xxresetassert and rtl83xxresetdeassert are only called from the probe path, which may sleep and is not timing-critical. When the reset GPIO is provided by a sleepin...

EUVD-2026-76322

In the Linux kernel, the following vulnerability has been resolved: net: dsa: realtek: use gpiodsetvaluecansleep for reset GPIO rtl83xxresetassert and rtl83xxresetdeassert are only called from the probe path, which may sleep and is not timing-critical. When the reset GPIO is provided by a sleepin...

CVE-2026-80999

CVE-2026-80999 affects the Linux kernel 's Realtek DSA driver (net: dsa: realtek). The root cause is that rtl83xx_reset_assert() and rtl83xx_reset_deassert() invoke the non-sleeping gpiod_set_value() for the reset GPIO. When that GPIO is backed by a sleeping controller such as an I2C I/O expander...

CVE-2026-80999 net: dsa: realtek: use gpiod_set_value_cansleep for reset GPIO

In the Linux kernel, the following vulnerability has been resolved: net: dsa: realtek: use gpiodsetvaluecansleep for reset GPIO rtl83xxresetassert and rtl83xxresetdeassert are only called from the probe path, which may sleep and is not timing-critical. When the reset GPIO is provided by a sleepin...

punk.py

punk.py unix SSH post-exploitation 1337 tool how it works punk.py is a post-exploitation tool meant to help network pivoting from a compromised unix box. It collect usernames, ssh keys and known hosts from a unix system, then it tries to connect via ssh to all the combinations found. punk.py is...

PT-2026-90129

In the Linux kernel, the following vulnerability has been resolved: net: dsa: realtek: use gpiod set value cansleep for reset GPIO rtl83xx reset assert and rtl83xx reset deassert are only called from the probe path, which may sleep and is not timing-critical. When the reset GPIO is provided by a...

ejbca-pqc-lab

EJBCA Pure PQC Lab — ML-DSA-65 2계층 PKI 계층구조 EJBCA Community Edition을 사용하여 NIST FIPS 204 ML-DSA를 2계층 PKI 계층구조에서 실습하는 구현입니다. 📖 전체 연습 가이드: 포스트퀀텀 PKI 구축: EJBCA에서 ML-DSA를 사용하여 루트 CA 및 서브 CA에 서명한 방법 이 랩에서 구축하는 것 두 개의 개별 가상 머신각각 자체 EJBCA 컨테이너 보유에서 실행되는 완전한 순수 PQC PKI 계층구조입니다. root@kitploit: VM 1 — Root ...

LR-WebPKI

LR+ WebPKI 평가 아티팩트 이 패키지는 최종 확정된 LR+ 참조 구현, 프로덕션 재구성 래퍼, 테스트, 그리고 WebPKI CA 컨텍스트에 대한 컨텍스트 폐쇄형 양자 후 인증을 위한 생성된 평가 출력물을 포함합니다. 이 패키지는 의도적으로 연구 로그 스냅샷이 아닌 제출 아티팩트로 작성되었습니다. 대상 이름, 파일 이름, 모듈 이름, 보고서는 안정적인 구현 용어를 사용합니다. 내용물 root@kitploit: src/lrplus/ LR+ 참조 모듈 scripts/ 코퍼스 다운로드, 빌드, 재구성, 평가, 검증 스크립트...

ecdsa-private-key-recovery

ecdsa-key-recovery ECDSAおよびDSAのNonce再利用による秘密鍵回復攻撃を実行します 署名の脆弱性を分析するための暗号研究ツールです 同じ nonce k を共有する2つの署名から秘密鍵を回復しましょう。同じ nonce k を選択すると、両方の署名が同一の署名値 r を持つことに注目してください。ECDSAのnonce再利用の良い候補を見つけるには、異なるメッセージ（またはハッシュ）に対して同じ r、pubkey、curve を共有する署名を探します。例：bitcoind ベースのブロックチェーンプロジェクトは通常、ECDSA署名素材の良い供給源です。...

Debian dsa-6483 : thunderbird - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6483 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6483-1 [email protected] https://www.debian.org/securit...

[SECURITY] [DSA 6482-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6482-1 [email protected] https://www.debian.org/security/ Andres Salomon September 03, 2026 https://www.debian.org/security/faq -...

Debian dsa-6474 : cockpit - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6474 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6474-1 [email protected] https://www.debian.org/securit...