Bug 1325079 (CVE-2014-9742) - CVE-2014-9742 botan: only single randombase used in prime number check
Summary: CVE-2014-9742 botan: only single randombase used in prime number check
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: CVE-2014-9742
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-04-08 07:22 UTC by Andrej Nemec
Modified: 2019-09-29 13:46 UTC (History)
1 user (show)

Fixed In Version: botan 1.10.8, botan 1.11.9
Clone Of:
Environment:
Last Closed: 2016-04-08 07:23:36 UTC
Embargoed:

Attachments (Terms of Use)

Description Andrej Nemec 2016-04-08 07:22:09 UTC 
A bug in the Miller-Rabin primality test resulted in only a single random
base being used instead of a sequence of such bases. This increased the
probability that a non-prime would be accepted by is_prime or that a
randomly generated prime might actually be composite. The probability
of a random 1024 bit number being incorrectly classed as prime with a
single base is around 2^-40.

Introduced in 1.8.3, fixed in 1.10.8 and 1.11.9

Original bug report:

https://bugzilla.novell.com/show_bug.cgi?id=974521
Note You need to log in before you can comment on or make changes to this bug.