Elliptic Curve Cryptography Archives

‘Crypto Bug of the Year’ Fixed — Update Java NOW

Richi Jennings | April 25, 2022 | CVE-2022-21449, Digital Signature, ECDSA, Elliptic Curve Cryptography, Elliptic Curve Digital Signature Algorithm, Java, Neil Madden, Oracle, Psychic Signatures, SB Blogwatch

A ridiculously dumb flaw in Java’s signature checking code is patched. This isn’t some crufty legacy Sun code, but actual garbage Oracle sloppiness that’s causing IT people to chase their tails yet again ...

Security Boulevard

Day 1 Detection: CVE-2020-0601, a community, and 40 Lines of code

Richard Bejtlich | January 17, 2020 | CVE-2020-0601, Elliptic Curve Cryptography, GitHub, Microsoft, NetFlow, network security monitoring, open source, Open Source Community, Richard Bejtlich, vulnerability, Windows CryptoAPI, Zeek

By Richard Bejtlich, Principal Security Strategist, Corelight On Tuesday, Jan. 14, 2020, the world learned of the vulnerability du jour, CVE-2020-0601. As explained by Microsoft, “a spoofing vulnerability exists in the way ...

Bright Ideas Blog