ID CVE-2017-13095
Summary The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as the management of access rights for such IP, including modification of a license-deny response to a license grant. The methods are flawed and, in the most egregious cases, enable attack vectors that allow recovery of the entire underlying plaintext IP. Implementations of IEEE P1735 may be weak to cryptographic attacks that allow an attacker to obtain plaintext intellectual property without the key, among other impacts.
References
Vulnerable Configurations
  • cpe:2.3:o
    cpe:2.3:o
CVSS
Base: 4.6
Impact:
Exploitability:
CWE CWE-310
CAPEC
  • Signature Spoofing by Key Recreation
    An attacker obtains an authoritative or reputable signer's private signature key by exploiting a cryptographic weakness in the signature algorithm or pseudorandom number generation and then uses this key to forge signatures from the original signer to mislead a victim into performing actions that benefit the attacker.
refmap via4
bid 101699
cert-vn VU#739007
the hacker news via4
id THN:7E74840E301A36EA659D1C8F234CBACF
last seen 2018-01-27
modified 2017-11-07
published 2017-11-06
reporter Mohit Kumar
source https://thehackernews.com/2017/11/ieee-p1735-ip-encryption.html
title IEEE P1735 Encryption Is Broken—Flaws Allow Intellectual Property Theft
Last major update 13-07-2018 - 16:29
Published 13-07-2018 - 16:29
Last modified 19-09-2018 - 11:18
Back to Top