Improper Verification of Cryptographic Signature in `node-forge`

digitalbazaar / forge

A native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps

https://digitalbazaar.com/

Other

5.08k stars 784 forks source link

Improper Verification of Cryptographic Signature in `node-forge` #967

Open HermesZum opened 2 years ago

HermesZum commented 2 years ago

RSA PKCS#1 v1.5 signature verification code does not check for tailing garbage bytes after decoding a DigestInfo ASN.1 structure. This can allow padding bytes to be removed and garbage data added to forge a signature when a low public exponent is being used.

https://mailarchive.ietf.org/arch/msg/openpgp/5rnE9ZRN1AokBVj3VqblGlP63QE/

davidlehn commented 2 years ago

What's the issue? This text is from a security advisory that was addressed in 1.3.0.