Lucene search

Second NSA Crypto Tool Found in RSA BSafe

🗓️ 31 Mar 2014 15:27:59Reported by Michael MimosoType

NSA backdoor in RSA BSafe algorithm for spying purposes discovered by research team. Dual EC DRBG algorithm exploited. Extended Random extension worsened predictability. RSA paid to include algorithm. BSafe vulnerable but Extended Random removed

Reporter	Title	Published	Views	Family All 187
Tenable Nessus	Mandriva Linux Security Advisory : openssl (MDVSA-2014:067)	10 Apr 201400:00	–	nessus
Tenable Nessus	SuSE 11.3 Security Update : OpenSSL (SAT Patch Number 9073)	17 Apr 201400:00	–	nessus
Tenable Nessus	SUSE SLES10 Security Update : OpenSSL (SUSE-SU-2014:0539-1)	20 May 201500:00	–	nessus
Tenable Nessus	openSUSE Security Update : openssl (openSUSE-SU-2014:0480-1)	13 Jun 201400:00	–	nessus
Tenable Nessus	FreeBSD : OpenSSL -- Local Information Disclosure (7ccd4def-c1be-11e3-9d09-000c2980a9f3)	14 Apr 201400:00	–	nessus
Tenable Nessus	Rockwell Automation Stratix ECDSA NONCE Side-Channel Recovery Attack (CVE-2014-0076)	15 Nov 202300:00	–	nessus
Tenable Nessus	SUSE SLES10 Security Update : OpenSSL (SUSE-SU-2014:0538-1)	20 May 201500:00	–	nessus
Tenable Nessus	IBM HTTP Server 8.0.x < 8.0.0.9 / 8.5.x < 8.5.5.3 (247195)	6 Jan 202100:00	–	nessus
Tenable Nessus	VMware Player 6.x < 6.0.2 OpenSSL Library Multiple Vulnerabilities (VMSA-2014-0004) (Linux) (Heartbleed)	21 Apr 201400:00	–	nessus
Tenable Nessus	VMware Player 6.x < 6.0.2 OpenSSL Library Multiple Vulnerabilities (VMSA-2014-0004) (Heartbleed)	21 Apr 201400:00	–	nessus

Source	Link
threatpost	www.threatpost.com/in-wake-of-latest-crypto-revelations-everything-is-suspect/102377
reuters	www.reuters.com/article/2013/12/20/us-usa-security-rsa-idUSBRE9BJ1C220131220
dualec	www.dualec.org/DualECTLS.pdf
reuters	www.reuters.com/article/2014/03/31/us-usa-security-nsa-rsa-idUSBREA2U0TY20140331
tools	www.tools.ietf.org/html/draft-rescorla-tls-extended-random-00
veridicalsystems	www.veridicalsystems.com/blog/immutability-of-fips/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

31 Mar 2014 15:59Current

0.1Low risk

Vulners AI Score0.1

EPSS0.001