Thomas H. Ptacek on Twitter: "Welp. It’s the crypto bug of the year. Mark it down for April. Java 15-18 ECDSA doesn’t sanity check that the random x coordinate and signature proof are nonzero; a (0,0) signature validates any message. Breaks JWT, SAML, &ampampampampampampampampampampampampampampampampampampampampampampampampampampampampampampampampampampampampamp;c. https://t.co/t2WgnS0g3A" / Twitter - discu.eu

Hacker News

Crypto bug of the year: ECDSA signatures broken in Java https://twitter.com/tqbf/status/1516570590211153922 5 comments 20/4/2022

Linking pages

Major cryptography blunder in Java enables “psychic paper” forgeries | Ars Technica https://arstechnica.com/information-technology/2022/04/major-crypto-blunder-in-java-enables-psychic-paper-forgeries 43 comments

Related searches:

Search whole site: site:twitter.com

Search title: Thomas H. Ptacek on Twitter: "Welp. It’s the crypto bug of the year. Mark it down for April. Java 15-18 ECDSA doesn’t sanity check that the random x coordinate and signature proof are nonzero; a (0,0) signature validates any message. Breaks JWT, SAML, &ampampampampampampampampampampampampampampampampampampampampampampampampampampampampampampampampampampampampamp;c. https://t.co/t2WgnS0g3A" / Twitter

See how to search.

Submit link to: