fortanix / rust-sgx

The Fortanix Rust Enclave Development Platform
https://edp.fortanix.com
Mozilla Public License 2.0
433 stars 98 forks source link

Fix `em_app` vulnerability #554

Closed raoulstrackx closed 8 months ago

raoulstrackx commented 8 months ago

There is a (minor) security issue in em-app. The encrypt_buffer and decrypt_buffer functions use the rustc_serialize::from_hex() function on a cryptographic key, but from_hex has secret dependent control flow. This PR removes those functions and bumps the version of em-app

Fixes #553