105 matches found
Key Confusion Attacks
PyJWT is vulnerable to asymmetric/symmetric key confusion attacks. PKCS1 PEM keys that begin with -----BEGIN RSA PUBLIC KEY----- will not be rejected by the invalidstrings check in HMACAlgorithm.preparekey. Using this flaw, attackers can cause symmetric/asymmetric confusion and create JWTs from...
[SECURITY] Fedora 24 Update: python-rsa-3.4.1-1.fc24
Python-RSA is a pure-Python RSA implementation. It supports encryption and decryption, signing and verifying signatures, and key generation according to PKCS1 version 1.5. It can be used as a Python library as well as on the command-line...
SILC客户端及服务器密钥协商远程整数溢出漏洞
BUGTRAQ ID: 28373 SILC（Secure Internet Live Conferencing）是安全的互联网会议讨论系统，可以发送任何类型的信息，包括多媒体信息，如视频、音频、图像等。 SILC处理畸形的数据交换时存在漏洞，远程攻击者可能利用此漏洞控制服务器。 如果要初始连接到SILC服务器，对等端（客户端、路由器和服务器）之间要执行相互认证并执行密钥协商协议以获得之后用于加密通讯的共享密钥。对等端之间的加密数据是通过以PKCS1 1.5标准编码的报文交换的。...
security flaw
verify.c in GnuTLS before 1.4.4, when using an RSA key with exponent 3, does not properly handle excess data in the digestAlgorithm.parameters field when generating a hash, which allows remote attackers to forge a PKCS 1 v1.5 signature that is signed by that RSA key and prevents GnuTLS from...
