Bug 1851294 (CVE-2020-12401)
| Summary: | CVE-2020-12401 nss: ECDSA timing attack mitigation bypass | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | Huzaifa S. Sidhpurwala <huzaifas> |
| Component: | vulnerability | Assignee: | Red Hat Product Security <security-response-team> |
| Status: | CLOSED ERRATA | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | CC: | crypto-team, dueno, elio.maldonado.batiz, kdudka, kengert, nss-nspr-maint, rrelyea, security-response-team, vlatombe |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | nss 3.55 | Doc Type: | If docs needed, set a value |
| Doc Text: |
A flaw was found in nss. Using the EM side-channel, it is possible to extract the position of zero and non-zero wNAF digits while nss-certutil tool performs scalar multiplication during the ECDSA signature generation, leaking partial information about the ECDSA nonce. Given a small number of ECDSA signatures, this information can be used to steal the private key. The highest threat from this vulnerability is to data confidentiality.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | 2020-09-30 03:57:14 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 1862389, 1862390, 1862391, 1862393, 1905152 | ||
| Bug Blocks: | 1826178 | ||
|
Description
Huzaifa S. Sidhpurwala
2020-06-26 04:17:32 UTC
Acknowledgments: Name: the Mozilla Project Upstream: Cesar Pereida Garcia and the Network and Information Security Group (NISEC) Upstream patch: https://hg.mozilla.org/projects/nss/rev/aeb2e583ee957a699d949009c7ba37af76515c20 Upstream bug: https://bugzilla.mozilla.org/show_bug.cgi?id=1631573 External References: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes Statement: This is a side channel attack which can used to exact pirate keys when ECDSA signatures are being generated. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible. Mitigation: This is a side channel attack which can used to exact pirate keys when ECDSA signatures are being generated. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible. Created nss tracking bugs for this issue: Affects: fedora-all [bug 1862393] This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Via RHSA-2020:4076 https://access.redhat.com/errata/RHSA-2020:4076 This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2020-12401 How come this has been addressed for RHEL 7 but not RHEL 8 ? The CVE page still indicates RHEL 8 is 'affected. The CVE page is now updated, showing that nss in RHEL-8 was fixed via RHSA-2021:0538. |