bc-java OpenSSHPrivateKeyParser DoS via unlimited bcrypt rounds

Vulnerability Overview This vulnerability involves a lack of restriction on the number of bcrypt iterations during the decryption of OpenSSH private keys. This allows an attacker to construct a malicious key file that consumes significant CPU resources, thereby causing a Denial of Service (DoS) attack. Scope of Impact Affected Component: The class within the project. Affected Versions: All versions that have not applied this fix. Attack Vector: An attacker can construct an OpenSSH private key file containing a high number of bcrypt iterations. When this file is attempted to be decrypted, it consumes excessive CPU resources, leading to a system denial of service. Remediation 1. Add Iteration Limit: - Added a limit on the number of bcrypt iterations in the file. The specific implementation is as follows: - Here, is a property with a default value of (i.e., 1,048,576). This value can be modified via configuration files. 2. Update Properties File: - Added a new property, , to the file to configure the maximum number of bcrypt iterations. 3. Test Cases: - Added the test case in the file to verify the behavior after the fix. ```java @Test public void testEncryptedKeyRoundsBounded() { String pem = "-----BEGIN OPENSSH PRIVATE KEY-----\n" + "b3BwZW5zc2gtY2hlbnVhZC1rZXktdjEAAAAACmJjcnlwdAAAAABAAAAAWYm94AAAAAEAAAAH\n" + "Ym90AAAAAgAAAA0AAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAE\n" + "AAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAA\n" + "AEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAH\n" + "AAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAA\n" + "HAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAAAHAAAAAEAAA

Goal Reached Thanks to every supporter — we hit 100%!

bc-java OpenSSHPrivateKeyParser DoS via unlimited bcrypt rounds

More from this source