<div dir="ltr">Hi,<br><br>and there has been a nice talk at the German OWASP Day:<br><a href="https://www.owasp.org/images/4/4c/Practical_Invalid_Curve_Attacks_on_TLS-ECDH_-_Juraj_Somorovsky.pdf">https://www.owasp.org/images/4/4c/Practical_Invalid_Curve_Attacks_on_TLS-ECDH_-_Juraj_Somorovsky.pdf</a><br><br>regards<br>Torsten<br></div><div class="gmail_extra"><br><div class="gmail_quote">2015-12-15 2:14 GMT+01:00 L. Aaron Kaplan <span dir="ltr"><<a href="mailto:aaron@lo-res.org" target="_blank">aaron@lo-res.org</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br>
FYI<br>
<br>
<br>
> Begin forwarded message:<br>
><br>
> From: Luciano Bello <<a href="mailto:luciano@debian.org">luciano@debian.org</a>><br>
> Subject: [SECURITY] [DSA 3417-1] bouncycastle security update<br>
> Date: 14 Dec 2015 13:51:06 CET<br>
> To: <a href="mailto:bugtraq@securityfocus.com">bugtraq@securityfocus.com</a><br>
> Resent-From: <a href="mailto:list@bendel.debian.org">list@bendel.debian.org</a> (Mailing List Manager)<br>
> Resent-Cc: recipient list not shown: ;<br>
> Reply-To: <a href="mailto:listadmin@SECURITYFOCUS.COM">listadmin@SECURITYFOCUS.COM</a><br>
><br>
> Signed PGP part<br>
> -------------------------------------------------------------------------<br>
> Debian Security Advisory DSA-3417-1                   <a href="mailto:security@debian.org">security@debian.org</a><br>
> <a href="https://www.debian.org/security/" rel="noreferrer" target="_blank">https://www.debian.org/security/</a>                            Luciano Bello<br>
> December 14, 2015                     <a href="https://www.debian.org/security/faq" rel="noreferrer" target="_blank">https://www.debian.org/security/faq</a><br>
> -------------------------------------------------------------------------<br>
><br>
> Package        : bouncycastle<br>
> CVE ID         : CVE-2015-7940<br>
> Debian Bug     : 802671<br>
><br>
> Tibor Jager, Jörg Schwenk, and Juraj Somorovsky, from Horst Görtz<br>
> Institute for IT Security, published a paper in ESORICS 2015 where they<br>
> describe an invalid curve attack in Bouncy Castle Crypto, a Java library<br>
> for cryptography. An attacker is able to recover private Elliptic Curve<br>
> keys from different applications, for example, TLS servers.<br>
><br>
> More information:<br>
> <a href="http://web-in-security.blogspot.ca/2015/09/practical-invalid-curve-attacks.html" rel="noreferrer" target="_blank">http://web-in-security.blogspot.ca/2015/09/practical-invalid-curve-attacks.html</a><br>
> Practical Invalid Curve Attacks on TLS-ECDH:<br>
> <a href="http://euklid.org/pdf/ECC_Invalid_Curve.pdf" rel="noreferrer" target="_blank">http://euklid.org/pdf/ECC_Invalid_Curve.pdf</a><br>
><br>
> For the oldstable distribution (wheezy), this problem has been fixed<br>
> in version 1.44+dfsg-3.1+deb7u1.<br>
><br>
> For the stable distribution (jessie), this problem has been fixed in<br>
> version 1.49+dfsg-3+deb8u1.<br>
><br>
> For the unstable distribution (sid), this problem has been fixed in<br>
> version 1.51-2.<br>
><br>
> We recommend that you upgrade your bouncycastle packages.<br>
><br>
> Further information about Debian Security Advisories, how to apply<br>
> these updates to your system and frequently asked questions can be<br>
> found at: <a href="https://www.debian.org/security/" rel="noreferrer" target="_blank">https://www.debian.org/security/</a><br>
><br>
> Mailing list: <a href="mailto:debian-security-announce@lists.debian.org">debian-security-announce@lists.debian.org</a><br>
><br>
><br>
<br>
_______________________________________________<br>
Ach mailing list<br>
<a href="mailto:Ach@lists.cert.at">Ach@lists.cert.at</a><br>
<a href="http://lists.cert.at/cgi-bin/mailman/listinfo/ach" rel="noreferrer" target="_blank">http://lists.cert.at/cgi-bin/mailman/listinfo/ach</a><br>
</blockquote></div><br></div>