Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

The Bleichenbacher test script should also check numbers bigger than modulus #713

Open
tomato42 opened this issue Oct 18, 2020 · 0 comments
Open

The Bleichenbacher test script should also check numbers bigger than modulus #713

tomato42 opened this issue Oct 18, 2020 · 0 comments
Labels
enhancement new feature to be implemented help wanted new test script will require creation of a new connection script
Projects
Vulnerability testers

Comments

@tomato42
Copy link
Member

New test script idea

What TLS message this idea relates to?

ClientKeyExchange

What is the behaviour the test script should test?

The script should send values of RSA ciphertext that represent numbers bigger than n. Such ciphertexts should be rejected with an alert (as they are publicly invalid).

Are there scripts that test related functionality?

test-bleichenbacher-workaround.py
test-bleichenbacher-timing.py

Additional information
@tomato42 tomato42 added enhancement new feature to be implemented help wanted new test script will require creation of a new connection script labels Oct 18, 2020
@tomato42 tomato42 added this to To do in Vulnerability testers via automation Oct 18, 2020
@tomato42 tomato42 changed the title The bleichenbacher test script should also check numbers bigger than modulus The Bleichenbacher test script should also check numbers bigger than modulus Jan 4, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
enhancement new feature to be implemented help wanted new test script will require creation of a new connection script
Projects
Vulnerability testers
  
To do
Milestone
No milestone
Development

No branches or pull requests
1 participant
@tomato42