AES-GCM key wrapping is generating a nonce with low entropy

uruk-project / Jwt

JSON Web Token implementation for .Net & .Net Core

MIT License

81 stars 13 forks source link

Closed ycrumeyrolle closed 3 years ago

ycrumeyrolle commented 3 years ago

The nonce is not initialized correctly. Currently the value is either an empty value, or a value of remaining bytes thanks to SkipLocalsInit.