Описание
: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (core modules).
This vulnerability is associated with program files G3413CTRBlockCipher.
This issue affects BC-JAVA: from 1.59 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.
A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA bcprov. The GOSTCTR implementation is unable to securely process more than 255 blocks of data due to keystream reuse. This issue allows an attacker to break the fundamental confidentiality of any data protected by the G3413CTRBlockCipher, potentially leading to the recovery and access of encrypted data.
Отчет
To exploit this flaw, an attacker needs to capture ciphertext encrypted by the GOSTCTR implementation where the G3413CTRBlockCipher processed more than 255 blocks of data, resulting in keystream reuse. An attack typically requires capturing these overlapping ciphertexts to perform cryptanalysis and uncover the underlying data.
The primary impact of this vulnerability is the potential loss of confidentiality for data encrypted by the GOSTCTR implementation. This can compromise encrypted communications or sensitive stored data by allowing an attacker to fully recover the plaintext.
Меры по смягчению последствий
To mitigate this vulnerability, strictly limit the payload encrypted under a single key and Initialization Vector (IV) pair using the GOSTCTR implementation and G3413CTRBlockCipher to a maximum of 255 blocks. Alternatively, transition to a more secure, standardized and authenticated encryption mode.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Cryostat 4 | bcprov-jdk18on | Not affected | ||
| OpenShift Developer Tools and Services | jenkins | Affected | ||
| OpenShift Developer Tools and Services | jenkins-2-plugins | Affected | ||
| Red Hat AMQ Broker 7 | bcprov-jdk15on | Not affected | ||
| Red Hat AMQ Clients | bcprov-jdk15on | Affected | ||
| Red Hat AMQ Clients | bcprov-jdk18on | Affected | ||
| Red Hat build of Apache Camel 4 for Quarkus 3 | bcprov-jdk18on | Affected | ||
| Red Hat build of Apicurio Registry 3 | bcprov-jdk18on | Not affected | ||
| Red Hat build of Apicurio Registry 3 | bcprov-lts8on | Not affected | ||
| Red Hat build of Debezium 3 | bcprov-ext-jdk15on | Will not fix |
Показывать по
Дополнительная информация
Статус:
EPSS
7.5 High
CVSS3
Связанные уязвимости
: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (core modules). This vulnerability is associated with program files G3413CTRBlockCipher. This issue affects BC-JAVA: from 1.59 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.
: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (core modules). This vulnerability is associated with program files G3413CTRBlockCipher. This issue affects BC-JAVA: from 1.59 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.
Bouncy Castle for Java GOST 28147 CTR mode reuses keystream after 255 blocks
Уязвимость файла G3413CTRBlockCipher криптографической библиотеки для платформы Java Bouncy Castle, позволяющая нарушителю раскрыть защищаемую информацию
EPSS
7.5 High
CVSS3