Bug 1510156 - RSA PKCS#1 v1.5 signatures made using rsa-pss keys are accepted as valid [rhel-7]
Summary: RSA PKCS#1 v1.5 signatures made using rsa-pss keys are accepted as valid [rhe...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: nss
Version: 7.5
Hardware: Unspecified
OS: Unspecified
medium
unspecified
Target Milestone: rc
: ---
Assignee: Daiki Ueno
QA Contact: Hubert Kario
Tomas Capek
URL:
Whiteboard:
Depends On: 1645231
Blocks: rhel7-rsa-pss-in-nss 1601056
TreeView+ depends on / blocked
 
Reported: 2017-11-06 19:46 UTC by Hubert Kario
Modified: 2019-08-07 10:03 UTC (History)
5 users (show)

Fixed In Version: nss-3.43.0-2.el7
Doc Type: Bug Fix
Doc Text:
.NSS no longer accepts RSA PKCS#1 v1.5 signatures made with an RSA-PSS key RSA-PSS keys can be used for creating RSA-PSS signatures only and signatures made with those keys that use the PKCS#1 v1.5 algorithm violate the standard. Previously, the Network Security Services (NSS) libraries did not check the type of an RSA public key used by a server when validating signatures made using a corresponding private key. Consequently, NSS accepted RSA PKCS#1 v1.5 signatures as valid, even if they were made with an RSA-PSS key. The bug has been fixed and the NSS libraries now properly check the type of RSA public keys used by a server when validating signatures made using a corresponding private key. As a result, the signatures in this scenario are no longer accepted by NSS.
Clone Of:
: 1601056 (view as bug list)
Environment:
Last Closed: 2019-08-06 13:08:26 UTC
Target Upstream Version:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Mozilla Foundation 1414931 0 P3 RESOLVED NSS accepts PKCS#1 v1.5 signatures made with RSA-PSS keys 2020-03-10 10:09:06 UTC
Red Hat Product Errata RHSA-2019:2237 0 None None None 2019-08-06 13:08:53 UTC

Description Hubert Kario 2017-11-06 19:46:39 UTC 
Description of problem:
NSS will accept RSA PKCS#1 v1.5 signatures made using RSA-PSS keys as correct

Version-Release number of selected component (if applicable):
3.34

How reproducible:
always

Steps to Reproduce:
1. start a server that will sign all SKEs with rsa-sha256, even if it has rsa-pss key
2. connect with tstclnt
3.

Actual results:
connection established

Expected results:
connection broken after processing SKE by client

Additional info:
Comment 2 Mirek Jahoda 2018-01-25 14:47:10 UTC 
   Hi Hubert,

Since this BZ should be described in the RHEL 7.5 Release Notes, could you please fill the Doc Text using the template? I'm not sure if I would be able to use 100% accurate wording using just the first comment.
Comment 5 Daiki Ueno 2018-10-18 12:12:07 UTC 
This should be fixed with the next rebase.
Comment 6 Simo Sorce 2019-02-11 15:39:29 UTC 
This issue was not selected to be included either in Red Hat Enterprise Linux 7.7 because it is seen either as low or moderate impact to a small amount of use-cases. The next release will be in Maintenance Support 1 Phase, which means that qualified Critical and Important Security errata advisories (RHSAs) and Urgent Priority Bug Fix errata advisories (RHBAs) may be released as they become available. We will now close this issue, but if you believe that it qualifies for the Maintenance Support 1 Phase, please re-open; otherwise we recommend moving the request to Red Hat Enterprise Linux 8 if applicable.
Comment 21 errata-xmlrpc 2019-08-06 13:08:26 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2019:2237
Note You need to log in before you can comment on or make changes to this bug.