bouncycastle – WindowsTechs.com

Nexus Intelligence Insights: CVE-2018-5382 Bouncycastle Information Exposure

Posted on December 26, 2019 by Elisa Velarde

For our last Nexus Intelligence Insight of 2019, we’ll cover a component vulnerability discovered in a not-so-happy accident that appears far more dangerous than the researcher had previously hypothesized.
The post Nexus Intelligence Insights: CVE… Continue reading Nexus Intelligence Insights: CVE-2018-5382 Bouncycastle Information Exposure→

VU#306792: Bouncy Castle BKS-V1 keystore files vulnerable to trivial hash collisions

Posted on March 19, 2018 by CERT

Bouncy Castle BKS version 1 keystore files use an HMAC that is only 16 bits long,which can allow an attacker to compromise the integrity of a BKS-V1 keystore. Continue reading VU#306792: Bouncy Castle BKS-V1 keystore files vulnerable to trivial hash collisions→