Skip to content

ECDSA CVE-2024-23342 #8

@hatch01

Description

@hatch01

This library depends on the Python library ecdsa, which is known to have a major vulnerability issue: tlsfuzzer/python-ecdsa#330

As said by the creator of this lib :

I don't want people to use this library in production environments...

It's a teaching tool, it's a testing tool, it's absolutely not an production grade implementation.
I maintain it to have support for ECDH and ECDSA in tlsfuzzer, which I need to be first and foremost portable. Security does not even enter a picture for that tool.

If you need enterprise grade implementation you should use pyca/cryptography.

Please look at moving to another lib that is more production-ready.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions