RAMnesia-Attack

本研究は、DDR5メモリを使用した最新のコンピューターシステムのハードウェアメモリに対する2つの重要な攻撃クラス（ Phoenix Rowhammer Attack（CVE-2025-6202） および RAMnesia Attack（CVE-2023-39910） ）の包括的な分析を提示します。両方の攻撃は、暗号化マテリアルの処理と保存における根本的な脆弱性を示し、ビットコインウォレットの秘密鍵を回復するための前例のない侵害ベクトルを作り出します。この研究は、2025年10月に開示されたWireTap攻撃およびTEE.fail攻撃で実証された、Intel SGX、AMD...

Phantom-Signature-Attack

本論文は、ビットコインプロトコルのデジタル署名実装における重大な脆弱性、すなわちPhantom Signature Attack （CVE-2025-29774）と基本的なSIGHASHSINGLE...

CVE-2026-33936

CVE-2026-33936 ecdsa PyPI 中的拒绝服务漏洞 介绍 我在 python-ecdsa 中识别并负责任地披露了一个 中等严重性 的漏洞，这是一个广泛使用的 Python 加密库，过去一个月有 4780 万次下载 。 我在审查 python-ecdsa 时发现了这个问题，心中带着一个非常具体的问题： 如果格式错误的 DER 虚假地声称其长度，而解析器过度信任该长度，会发生什么？ 在这个案例中，这个问题引出了一个真实漏洞。 ecdsa.der 中的 DER...

CVE-2024-31497-POC

CVE-2024-31497 POC この脆弱性は、ecc-ssh.c ファイルにおける ECDSA ノンス生成の偏りを悪用します。ノンスは $sha512ID\ ||\ sha512privKey\ ||\ sha1data\ mod\ q$ で生成され、上位9ビットがゼロになります。秘密鍵を復元するには60個の署名が必要ですが、58個でも成功確率は50%です。 脆弱性は Bäumer と Marcus Brinkmann によって発見されました。 要件 このエクスプロイトを使用するには、sagemath と requirements.txt 内の Python...

DEBIAN-CVE-2026-87733

An issue was discovered in the mirage-crypto-ec function before 2.2.0 for OCaml. The ECDSA functions P256,P384,P521.Dsa.pubofoctets accept 0x00, the encoding of the point at infinity, as a public key. With that public key, signatures can be forged without a private key...

CVE-2026-87733

An issue was discovered in the mirage-crypto-ec function before 2.2.0 for OCaml. The ECDSA functions P256,P384,P521.Dsa.pubofoctets accept 0x00, the encoding of the point at infinity, as a public key. With that public key, signatures can be forged without a private key...

CVE-2026-87733

mirage-crypto-ec for OCaml , versions before 2.2.0 , contains a flaw in the ECDSA functions {P256, P384, P521}.Dsa.pub_of_octets. The function accepts 0x00 —the encoding of the point at infinity —as a valid public key, allowing an attacker to forge ECDSA signatures without knowledge of the privat...

CVE-2026-87733

An issue was discovered in the mirage-crypto-ec function before 2.2.0 for OCaml. The ECDSA functions P256,P384,P521.Dsa.pubofoctets accept 0x00, the encoding of the point at infinity, as a public key. With that public key, signatures can be forged without a private key...

EUVD-2026-74619

An issue was discovered in the mirage-crypto-ec function before 2.2.0 for OCaml. The ECDSA functions P256,P384,P521.Dsa.pubofoctets accept 0x00, the encoding of the point at infinity, as a public key. With that public key, signatures can be forged without a private key...

demo-cve-2022-21449

デモプロジェクト: CVE-2022-21449 脆弱性 このプロジェクトは、Java の ECDSA 署名検証に影響を与える CVE-2022-21449 脆弱性を実証します。この脆弱性により、攻撃者はゼロ値 r=0 および s=0 の署名を使用して署名検証をバイパスできます。このプロジェクトは、セキュリティパッチが適用されていない Java 17 上で問題を示すために、実際の JWT トークンと偽の JWT トークン EC 署名付き を使用します。 特徴 実際の JWT トークン : EC 秘密鍵で署名された有効な JWT トークン。 偽の JWT トークン : ゼロ埋め署名 r=0...

Linux Distros Unpatched Vulnerability : CVE-2026-87733

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the mirage-crypto-ec function before 2.2.0 for OCaml. The ECDSA functions P256,P384,P521.Dsa.pubofoctets accept 0x00, the encoding of...

ECC_Attacks

Known Attacks On Elliptic Curve Cryptography Introduction Introduction To Elliptic Curves Elliptic Curves In The Context Of Cryptography ECC Attacks ECDH Attacks The Order Of The Generator Is Too Small The Order Of The Generator Is A Smooth Number The Order Of The Generator Is Almost A Smooth...

cve-2024-13176-timing-analysis

CVE-2024-13176 中低幅度 ECDSA 时序泄漏的插桩检测 本仓库包含针对 CVE-2024-13176 的一项独立研究的研究报告、网站、数据、原始材料与可复现性文件。 该项目旨在考察：在受控的 ARM64 虚拟化 Linux 环境中，是否能够检测到 OpenSSL ECDSA 签名所报告的与 nonce 相关的时序条件。 主要结果 确证性实验使用 ECDSA P-521 配合源码级插桩，对 OpenSSL 3.4.0 与 OpenSSL 3.4.1 进行了对比。 最终数据集包含横跨 30 个成对采集块的 600,000 次签名观测。 在主要内部时序观测点： OpenSSL...

NewStart CGSL MAIN 7.02 : openssh Multiple Vulnerabilities (NS-SA-2026-0101)

The remote NewStart CGSL host, running version MAIN 7.02, has openssh packages installed that are affected by multiple vulnerabilities: - ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re- exchange. This outcome occurs only on the client side...

K000163154: wolfSSL vulnerability CVE-2026-5194

Security Advisory Description Missing hash/digest size and OID checks allow digests smaller than allowed when verifying ECDSA certificates, or smaller than is appropriate for the relevant key type, to be accepted by signature verification functions. This could lead to reduced security of ECDSA...

Astra Linux – Vulnerability in mbedtls

In Arm Mbed TLS before version 2.19.0, and Arm Mbed Crypto before version 2.0.0, when deterministic ECDSA is enabled, an RNG with insufficient entropy is used for blinding. This may allow an attacker to recover a private key through side-channel attacks if a victim signs the same message multiple...

Astra Linux – Vulnerability in Node-Elliptic

In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because BER-encoded signatures are allowed...

Astra Linux – Vulnerability in nss

During ECDSA signature generation, padding is applied in the nonce to ensure that constant-time scalar multiplication is removed. However, this results in variable-time execution that depends on secret data. This vulnerability affects Firefox versions less than 80, as well as Firefox for Android...

Astra Linux – Vulnerability in openssl1.0

Normally, in OpenSSL, EC groups always contain a co-factor, and this co-factor is used in code paths that resist side channels. However, in some cases, it is possible to create a group using explicit parameters instead of a named curve. In these cases, the group may not contain a co-factor. This...

Astra Linux – Vulnerability in bind9

By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode the available memory to the point where named crashes occur due to lack of resources...