News for hackers. Stuff that matters.

A comment on Patch Critical Cryptographic Vulnerability in Microsoft Windows [pdf]. Parent comment

Re:Patch Critical Cryptographic Vulnerability in Microsoft W... by Hello71 on Tuesday January 14, 2020 @02:21PM (#22048266)
Sounds similar to the post from a few days ago about the Firefox WebCrypto allowing too much adjustment of DH parameters: https://news.ycombinator.com/item?id=21980199
[ Parent | on HN ]
Re:Patch Critical Cryptographic Vulnerability in Microsoft W... by tptacek on Tuesday January 14, 2020 @02:24PM (#22048296)
It is indeed very similar in spirit, and of course much more devastating here.

Another attack, implemented on ECDSA and similar in spirit (though not the same attack) is in Sean Devlin's Set 7 of Cryptopals:

https://toadstyle.org/cryptopals/61.txt

[ Parent | on HN ]