The BKS version 1 keystore files for Bouncy Castle, a collection of cryptographic APIs for C# and Java applications, reportedly contain a weak hash-based message authentication code (HMAC) that can be cracked by hackers in seconds using hash collision attacks. In a vulnerability advisory published ...
from Google Alert - vulnerability http://ift.tt/2GI1o5s
via IFTTT
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment