Описание
The implementation of EdDSA in EdDSA-Java (aka ed25519-java) through 0.3.0 exhibits signature malleability and does not satisfy the SUF-CMA (Strong Existential Unforgeability under Chosen Message Attacks) property. This allows attackers to create new valid signatures different from previous signatures for a known message.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| libeddsa-java | fixed | 0.3.0-2.1 | package |
Примечания
https://github.com/str4d/ed25519-java/pull/82
Связанные уязвимости
The implementation of EdDSA in EdDSA-Java (aka ed25519-java) through 0.3.0 exhibits signature malleability and does not satisfy the SUF-CMA (Strong Existential Unforgeability under Chosen Message Attacks) property. This allows attackers to create new valid signatures different from previous signatures for a known message.
The implementation of EdDSA in EdDSA-Java (aka ed25519-java) through 0.3.0 exhibits signature malleability and does not satisfy the SUF-CMA (Strong Existential Unforgeability under Chosen Message Attacks) property. This allows attackers to create new valid signatures different from previous signatures for a known message.
Ed25519 Signature Malleability in ed25519-java Due to Missing Scalar Range Check
Уязвимость реализации алгоритма цифровой подписи EdDSA EdDSA-Java (ed25519-java), связанная с некорректной проверкой криптографической подписи EdDSA, позволяющая нарушителю подменить криптографическую подпись