Monday, March 19, 2018

Bouncy Castle BKS-V1 keystore files vulnerable to trivial hash collisions

Bouncy Castle BKS version 1 keystore files use an HMAC that is only 16 bits long, which can allow an attacker to crack a BKS-V1 keystore file in seconds.

from Google Alert - vulnerability http://ift.tt/2HKswzU
via IFTTT

No comments:

Post a Comment