5 ms·
So... Wait, they weren't calculating the signature based on ALL the contents of the cert? There was an "unprotected" section in the cert that allowed for curve
by SlowRobotAhead 7y ago
So... Wait, they weren't calculating the signature based on ALL the contents of the cert? There was an "unprotected" section in the cert that allowed for curve details? This seems... too obviously bad.
- bodeadly 7y agoNot exactly but I'm not sure it matters. It sounds like if the curve parameters are crafted just-so, they can dodge validation and use anyone's public key and yet still negotiate successfully and decrypt everything. The "gramdma" explaination is basically the green lock next to the URL in your browser doesn't mean spit at this particular moment in time.
- mzs 7y agoBasically there are standard curves and software assumed parameters matched, bad design. edit: more detail https://news.ycombinator.com/item?id=22048619 https://news.ycombinator.com/item?id=22048619
- SlowRobotAhead 7y agoAh I see. It wasn’t that they didn’t secure parts of the cert, it’s that they assumed they didn’t need to add some data. The generator was assumed standard... and surely no one would ever abuse that intention!