The Network Security. Org

RSS Feed

OpenSSL signatures can be forged

September 9th, 2006 · No Comments


OpenSSL may fail to detect forged digital signatures under certain conditions due to an error in theweb_attention.png implementation, a failure to check a certain condition while verifying the RSA signature. The flaw affects all systems that use the OpenSSL library, and in particular servers secured with SSL/TLS and VPNs based on SSL/TLS. OpenSSL versions 0.9.7k and 0.9.8c have eliminated the vulnerability.

The attack is only good against keys with exponent of 3. There are not too many of these around any more but you still run into them occasionally. It depends on an error in verifying the PKCS-1 padding of the signed hash. OpenSSL signatures can be forged - IT Observer

From around the Web

  • Advertisments