Closed jouniaro closed 4 years ago
BC 1.60 has a known security vulnerability and it is recommended to upgrade to a new version. Currently 1.64 is the latest version and should be targeted, if possible.
https://crypto.stackexchange.com/questions/61121/is-bouncycastle-rsaoaep-implementation-vulnerable-to-manger-s-attack
Fixed in commit b696e8ba408ca93a5f886c17049669fa66413b6c
BC 1.60 has a known security vulnerability and it is recommended to upgrade to a new version. Currently 1.64 is the latest version and should be targeted, if possible.
https://crypto.stackexchange.com/questions/61121/is-bouncycastle-rsaoaep-implementation-vulnerable-to-manger-s-attack