Legion of the Bouncy Castle: The Bouncy Castle Crypto Package for Java – Encryption Problem Vulnerabilities

Legion of the Bouncy Castle: The Bouncy Castle Crypto package has vulnerabilities for versions of Java 2.73.13 and earlier. This vulnerability stems from the native one-time CTR block cipher not checking whether the input length exceeds the counter’s remaining space after the Initial Value IV. As...