Inadequate Cryptographic Key Size and Insecure Cryptographic Mode. File Name :- curl_ntlm_core.c

密码学缺陷 / Use of a Broken or Risky Cryptographic Algorithm / #1113663

厂商

curl

严重程度

中危

赏金

—

弱点

Use of a Broken or Risky Cryptographic Algorithm

研究员

@sanchitcfc

披露日期

2021-03-08

资产

https://github.com/curl/curl

CVE

—

该报告还没有中文解读。

The application is generating cryptographic keys or key pairs using a short and inadequate length. This application is using the ECB (Electronic Codebook) mode of operation to perform encryption, which is considered semantically insecure.