You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@mina.apache.org by "Louis Berube (JIRA)" <ji...@apache.org> on 2019/07/24 13:03:00 UTC

[jira] [Created] (SSHD-934) Invalid public key encoding of certain ecdsa-sha2-nistpX host keys

Louis Berube created SSHD-934:
---------------------------------

             Summary: Invalid public key encoding of certain ecdsa-sha2-nistpX host keys
                 Key: SSHD-934
                 URL: https://issues.apache.org/jira/browse/SSHD-934
             Project: MINA SSHD
          Issue Type: Bug
    Affects Versions: 1.2.0, 2.1.0
            Reporter: Louis Berube
         Attachments: ECDSA-encode-decode-junit-fragment.txt

There appears to be an error in encoding the public part of certain ECDSA host key values. The bug has been found to affect the ecdsa-sha2-nistpX host key algorithms.

The bug affects the different ECDSA host key types to different degrees. Usually when one generates a host key value it will work okay. However, if one repeatedly generates new host key values then eventually a value will be generated for which the encoding is not calculated correctly:
 * For ecdsa-sha2-nistp512: within ~10 repetitions
 * For ecdsa-sha2-nistp256: within ~200 repetitions
 * For ecdsa-sha2-nistp384: within ~1000 repetitions

The attached Junit test code fragment was used to generate the above statistics.



--
This message was sent by Atlassian JIRA
(v7.6.14#76016)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@mina.apache.org
For additional commands, e-mail: dev-help@mina.apache.org