DiffieHellman doesn't generate keys after setting a key

其他弱点 / Inconsistency Between Implementation and Documented Design / #1927480

厂商

Node.js

严重程度

低危

赏金

—

弱点

Inconsistency Between Implementation and Documented Design

研究员

@bensmyth

披露日期

2023-07-20

资产

https://github.com/nodejs/node

CVE

CVE-2023-30590

该报告还没有中文解读。

DiffieHellman doesn't generate keys after setting a key

//set private key to 2
dh.setPrivateKey(Buffer.from("02", 'hex'));        
//outputs 02 (as expected)
console.log(dh.getPrivateKey().toString('hex'));