CVE-2003-0147 in OpenSSL

Сводка (Английский)

OpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain the server s private key by determining factors using timing differences on (1) the number of extra reductions during Montgomery reduction, and (2) the use of different integer multiplication algorithms ("Karatsuba" and normal).

Раскрытие

31.03.2003

Записи

VulDB provides additional information and datapoints for this CVE:

ИД	Уязвимость	CWE	Экс	Кон	CVE
16	OpenSSL RSA Key Handling		Не определено	Официальное исправление	CVE-2003-0147