Bug 19995 - pkcs11-tool generates RSA keys with publicExponent 1 instead of 65537
Summary: pkcs11-tool generates RSA keys with publicExponent 1 instead of 65537
Status: CLOSED FIXED
Alias: None
Product: Sisyphus
Classification: Development
Component: opensc (show other bugs)
Version: unstable
Hardware: all Linux
: P3 blocker
Assignee: Andrey Cherepanov
QA Contact: qa-sisyphus
URL: http://www.opensc-project.org/piperma...
Keywords: security
Depends on:
Blocks:
 
Reported: 2009-05-10 08:55 MSD by Vladimir Lettiev
Modified: 2009-05-19 13:16 MSD (History)
2 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Vladimir Lettiev 2009-05-10 08:55:55 MSD 
Вследствии ошибки в коде могут создаваться слабые RSA ключи, что теоретически позволяет получить злоумышленнику закрытый ключ.
Выпущено исправление в версии 0.11.8
Comment 1 Andriy Stepanov (stanv) 2009-05-18 17:12:11 MSD 
В Sisyphus ушло.
Нужно ли новый пакет бекпортить в 4.x 5.0 ?
Comment 2 Sergey V Turchin 2009-05-18 17:37:20 MSD 
Раз security, то желательно
Comment 3 Andriy Stepanov (stanv) 2009-05-19 09:51:57 MSD 
OpenSC Security Advisory [07-May-2009]
======================================

pkcs11-tool generates RSA keys with publicExponent 1 instead of 65537

......

This bug only affects users of OpenSC SVN trunk or OpenSC release
0.11.7. Older releases do not contain this problem, and the new
OpenSC release 0.11.8 fixes this problem. 

В 4.x версия 0.11.6 с ней все впорядке.
Comment 4 Vladimir Lettiev 2009-05-19 10:08:25 MSD 
ок, закрывайте.