Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In the Bouncy Castle JCE Provider version 1.55 and earlier DSA signature generation is vulnerable to timing attack. Where timings can be closely observed for the generation of signatures, the lack of blinding in 1.55, or earlier, may allow an attacker to gain information about the signature's k value and ultimately the private value as well.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Bouncy Castle JCE Provider 代码问题漏洞
Vulnerability Description
Bouncy Castle JCE Provider是一款基于Java的加密包。 Bouncy Castle JCE Provider 1.55及之前版本中DSA签名的产生存在安全漏洞。攻击者可利用该漏洞获取有关签名k值的有关信息，从而获取有关私有值的信息。
CVSS Information
N/A
Vulnerability Type
N/A