3 matches found
Nettle Cryptographic Library Data Compromise
The vulnerability of the ecc256modp function in the Nettle cryptographic library is related to errors in cryptographic transformations. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Nettle has an unspecified vulnerability
Nettle is a library of basic cryptographic functions. A security vulnerability exists in the 'ecc256modp' function in the ecc-256.c file in versions prior to Nettle 3.2, which stems from a failure of the program to properly handle rounding transfers when implementing P-256 NIST elliptic curves. A...
PT-2015-3202
Name of the Vulnerable Software and Affected Versions Nettle versions prior to 3.2 Description The issue is related to the ecc 256 modp function in ecc-256.c, which does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve. Thi...