Description
nCipher HSM before 2.22.6, when generating a Diffie-Hellman public/private key pair without any specified DiscreteLogGroup parameters, chooses random parameters that could allow an attacker to crack the private key in significantly less time than a brute force attack.
References
- ADV-2006-0862 vdb-entry
- 1015719 vdb-entry
- 20060308 nCipher Advisory #12: Insecure Generation of Diffie-Hellman keys mailing-list
- http://www.ncipher.com/resources/95/sa12_insecure_generation_of_diffiehellman_keys
- 17006 vdb-entry
- 19137 third-party-advisory
- ncipher-hsm-weak-key(25060) vdb-entry