3 results · Clear filters · Feed
-
High 7.5
RNP 0.18.0 Vulnerable PKESK session keys
In RNP version 0.18.0 a refactoring regression causes the symmetric session key used for Public-Key Encrypted Session Key (PKESK) packets to be left uninitialized except for zeroing, resulting in it always being an all-zero byte array. Any data encrypted usin…
-
High 7.5
Ribose RNP before 0.16.3 sometimes lets secret keys remain unlocked after use.
-
High 7.5
Ribose RNP before 0.15.1 does not implement a required step in a cryptographic algorithm, resulting in weaker encryptio…