News for hackers. Stuff that matters.

A comment on Patch Critical Cryptographic Vulnerability in Microsoft Windows [pdf]. Parent comment

Re:Patch Critical Cryptographic Vulnerability in Microsoft W... by mzs on Tuesday January 14, 2020 @03:27PM (#22048911)
Basically there are standard curves and software assumed parameters matched, bad design.

edit: more detail

https://news.ycombinator.com/item?id=22048619

[ Parent | on HN ]
Re:Patch Critical Cryptographic Vulnerability in Microsoft W... by SlowRobotAhead on Tuesday January 14, 2020 @09:08PM (#22051173)
Ah I see. It wasn’t that they didn’t secure parts of the cert, it’s that they assumed they didn’t need to add some data. The generator was assumed standard... and surely no one would ever abuse that intention!
[ Parent | on HN ]