Eclipse KeyPont GOSEでJWEの改ざん検知が無効になる脆弱性
Summary
Eclipse KeyPont GOSEでは、HmacShaCryptor.Hashが入力値を使わず常に同じ値を返すため、AES-CBC-HMAC形式のJWEの改ざん検知が機能しなくなります。影響を受けるのは1.0.0-rc1より前のバージョンで、修正版の1.0.0-rc1以降へ更新してください。
AI summary
Written by an external AI model and may contain mistakes. Check the original description and references below before acting on it.
Eclipse KeyPont GOSEでは、HmacShaCryptor.Hashが入力値を使わず常に同じ値を返すため、AES-CBC-HMAC形式のJWEの改ざん検知が機能しなくなります。影響を受けるのは1.0.0-rc1より前のバージョンで、修正版の1.0.0-rc1以降へ更新してください。
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| Eclipse Foundation | Eclipse KeyPont - GOSE |
< 1.0.0-rc1 |
1.0.0-rc1 |
Original description The description as published by the source.
HmacShaCryptor.Hash never hashed its input. For any input it returned HMAC_K("") — the MAC of the empty message under the key. Every AES-CBC-HMAC JWE produced or verified by gose therefore carried an authentication tag that is constant per key and independent of the message, removing ciphertext integrity entirely.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov