地图 / Certificate signed using SHA-1

Certificate signed using SHA-1

密码学缺陷 / Unlabeled / #190015

厂商: Gratipay
严重程度: 低危
赏金: —
弱点: Unlabeled
研究员: @lulliii
披露日期: 2016-12-29
资产: —
CVE: —

该报告还没有中文解读。

原文摘录

摘自原文（424 字符中的一小部分）

Hello, I detected a certificate signed using SHA-1. SHA-1 is a hash algorithm used in digital signatures. It is currently considered deprecated due to the increasing feasibility in breaking it.

默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Gratipay 所有。

时间线

2016-12-10报告提交
2016-12-29公开披露

阅读 HackerOne 原文 ↗作者 @lulliii · 版权归作者与 Gratipay 所有

同类报告

WannaCrypt “Killswitch”HackerOne · 2017-05-13 [Java] CWE-326: Query to detect weak encryption with an insufficient key sizeGitHub Security Lab · — · $4,500 sign_multisig crashes monero-wallet-rpc on a malformed but decryptable multisig txsetMonero · 2026-09-17 Use of Cryptographically Weak Pseudo-Random Number Generator in WebCrypto keygenInternet Bug Bounty · 2023-04-09 · $4,000 Exposed Unencrypted Telnet EndpointStarbucks · 2017-02-08 Android app does not clear end to end encryption keysNextcloud · 2021-06-16 · $100