Re:Patch Critical Cryptographic Vulnerability in Microsoft W...
by tptacek on Tuesday January 14, 2020 @02:09PM
(#22048164)
Good find. This page should almost certainly be the headline article on HN, at least until someone does a full write-up of the vulnerability --- but the vulnerability here looks very simple (and gross): if you can define your own curve parameters and get CryptoAPI to honor them, you can sign anything.
[ Parent
| on HN ]
Re:Patch Critical Cryptographic Vulnerability in Microsoft W...
by dc352 on Tuesday January 14, 2020 @05:22PM
(#22049846)
The only way to do it (I'm lazy so didn't read any of the documents - my gut feeling of an engineer) ... is to use ECDH, which provides EC params in ServerKeyExchange. CryptoAPI might have used those and just pull the public key from the cert.