CVE-2018-5382

CVE-2018-5382

Bouncy Castle BKS version 1 keystore (BKS-V1) files use an HMAC that is only 16 bits long, which can allow an attacker to compromise the integrity of a BKS-V1 keystore. All BKS-V1 keystores are vulnerable. Bouncy Castle release 1.47 introduces BKS version 2, which uses a 160-bit MAC.

Source: CVE-2018-5382

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다