58 matches found
SymCrypt-OpenSSL
SCOSSL - 用于OpenSSL的SymCrypt引擎和提供程序 用于OpenSSL的SymCrypt引擎和提供程序（SCOSSL）允许将OpenSSL与SymCrypt结合使用，以SymCrypt作为核心密码运算的提供程序。 这样做的主要动机是支持FIPS认证，因为原生OpenSSL 1.1.1没有经过FIPS认证的密码模块， 并且OpenSSL 3的fips模块未通过FIPS 140-3标准认证。 SymCrypt引擎（OpenSSL 1.1.1） SymCrypt提供程序（OpenSSL 3） 版本与服务支持...
dumpscan
Public development on this tool has been paused but is still being worked on privately. Expect a massive update Q3/Q4 2024. Dumpscan is a command-line tool designed to extract and dump secrets from kernel and Windows Minidump formats. Kernel-dump parsing is provided by volatility3. Features x509...
dumpscan
此工具的公共开发已暂停，但仍在私下进行。预计2024年第三/第四季度将有重大更新。 Dumpscan 是一个命令行工具，旨在从内核和Windows Minidump格式中提取和导出机密。内核转储解析由 volatility3 提供。 功能 x509 公钥和私钥PKCS 8/PKCS 1解析 SymCrypt 解析 支持的结构 SYMCRYPTRSAKEY - 确定密钥结构是否也包含私钥 与同一进程中找到的公共证书匹配 更多SymCrypt结构即将推出 环境变量 命令行参数 注意 ：仅对Windows 10和11 64位主机和进程进行了测试。欢迎提交针对其他版本的问题。Linux测试待定。...
CVE-2026-35199
SymCrypt is the core cryptographic function library currently used by Windows. From 103.5.0 to before 103.11.0, The SymCryptXmssSign function passes a 64-bit leaf count value to a helper function that accepts a 32-bit parameter. For XMSS^MT parameter sets with total tree height = 32 which include...
CVE-2026-35199
SymCrypt is the core cryptographic function library currently used by Windows. From 103.5.0 to before 103.11.0, The SymCryptXmssSign function passes a 64-bit leaf count value to a helper function that accepts a 32-bit parameter. For XMSS^MT parameter sets with total tree height = 32 which include...
AZL-82961 CVE-2026-35199 affecting package SymCrypt 103.8.0-1
SymCrypt is the core cryptographic function library currently used by Windows. From 103.5.0 to before 103.11.0, The SymCryptXmssSign function passes a 64-bit leaf count value to a helper function that accepts a 32-bit parameter. For XMSS^MT parameter sets with total tree height = 32 which include...
EUVD-2026-19472
SymCrypt is the core cryptographic function library currently used by Windows. From 103.5.0 to before 103.11.0, The SymCryptXmssSign function passes a 64-bit leaf count value to a helper function that accepts a 32-bit parameter. For XMSS^MT parameter sets with total tree height = 32 which include...
CVE-2026-35199 SymCrypt SymCryptXmssSign function - Heap overflow via 64->32-bit leaf-count truncation
SymCrypt is the core cryptographic function library currently used by Windows. From 103.5.0 to before 103.11.0, The SymCryptXmssSign function passes a 64-bit leaf count value to a helper function that accepts a 32-bit parameter. For XMSS^MT parameter sets with total tree height = 32 which include...
CVE-2026-35199
Summary: CVE-2026-35199 affects the SymCrypt XMSS^MT signing path in Windows. A 64-bit leaf-count is passed to a 32-bit parameter helper, causing silent truncation to zero for XMSS^MT parameter sets with total tree height ≥ 32. This leads to an undersized scratch buffer and a heap buffer overflow...
CVE-2026-35199 SymCrypt SymCryptXmssSign function - Heap overflow via 64->32-bit leaf-count truncation
SymCrypt is the core cryptographic function library currently used by Windows. From 103.5.0 to before 103.11.0, The SymCryptXmssSign function passes a 64-bit leaf count value to a helper function that accepts a 32-bit parameter. For XMSS^MT parameter sets with total tree height = 32 which include...
Microsoft Windows SymCrypt 安全漏洞
Microsoft Windows SymCrypt is the core encryption function library currently used in Windows by Microsoft. Versions of Microsoft Windows SymCrypt from 103.5.0 to 103.11.0 contained security vulnerabilities. These vulnerabilities stemmed from issues with the SymCryptXmssSign function, where...
PT-2026-30723
SymCrypt is the core cryptographic function library currently used by Windows. From 103.5.0 to before 103.11.0, The SymCryptXmssSign function passes a 64-bit leaf count value to a helper function that accepts a 32-bit parameter. For XMSS^MT parameter sets with total tree height = 32 which include...
EUVD-2019-1614
Malware in sbrugna...
EUVD-2019-9742
Malware in sbrugna...
CVE-2019-0865
A denial of service vulnerability exists when SymCrypt improperly handles a specially crafted digital signature.An attacker could exploit the vulnerability by creating a specially crafted connection or message.The security update addresses the vulnerability by correcting the way SymCrypt handles...
Google Chrome Switches to ML-KEM for Post-Quantum Cryptography Defense
Google has announced that it will be switching from KYBER to ML-KEM in its Chrome web browser as part of its ongoing efforts to defend against the risk posed by cryptographically relevant quantum computers CRQCs. "Chrome will offer a key share prediction for hybrid ML-KEM codepoint 0x11EC," David...
Microsoft Is Adding New Cryptography Algorithms
Microsoft is updating SymCrypt, its core cryptographic library, with new quantum-secure algorithms. Microsofts details are here. From a news article: The first new algorithm Microsoft added to SymCrypt is called ML-KEM. Previously known as CRYSTALS-Kyber, ML-KEM is one of three post-quantum...
The vulnerability of the SymCrypt library in the Windows operating system, which allows a hacker to trigger a service failure
The vulnerability of the SymCrypt library in the Windows operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...