oss-security - CVE request: MatrixSSL lack of RSA-CRT hardening

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <87oa6n9nap.fsf@mid.deneb.enyo.de>
Date: Mon, 27 Jun 2016 08:08:14 +0200
From: Florian Weimer <fw@...eb.enyo.de>
To: cve-assign@...re.org
Cc: oss-security@...ts.openwall.com
Subject: CVE request: MatrixSSL lack of RSA-CRT hardening

MatrixSSL 3.8.3 comes with this fix:

<https://github.com/matrixssl/matrixssl/blob/master/CHANGES.md#validation-of-rsa-signature-creation>

I think this warrants a CVE ID because RSA-CRT key leaks from
MatrixSSL have been observed in practice.  (I'm not sure if the
contributing factor was a bug in the MatrixSSL bignum routines, or
defective hardware.)

(There are some other changes whose description suggests they would
warrant CVE assignment as well, but I have not looked at those.)

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.