Gentoo GLSA 201310-10: PolarSSL Weak Diffie-Hellman and RSA Prime Generation Fix

Vulnerability Information: CVE-2012-2130 CVE ID: CVE-2012-2130 Status: Resolved and Fixed (RESOLVED FIXED) Reported Date: 2012-05-17 14:40 UTC Last Updated: 2013-10-17 09:03 UTC Product: Gentoo Security --- Vulnerability Description: A vulnerability was introduced during the code migration in PolarSSL 0.99-pre4, weakening the Diffie-Hellman value X during generation on both client and server sides. The X value was only partially filled with random data instead of being fully randomized. Additionally, MPI primes were generated within a limited subset of the full prime space, also filled only partially with random data. RSA keys and primes generated under these conditions are insecure. Impact: Weakened Diffie-Hellman Key Exchange: Makes it easier for attackers to brute-force private values and master keys, potentially allowing modification and reading of all data transmitted over secure channels. Reduced RSA Key Security: RSA keys generated using are also vulnerable. Solution: PolarSSL 1.1.2: Includes the fix, generating full-sized X values and primes. Recommended Action: Regenerate and replace any primes or RSA keys generated under affected versions. --- Related Comments and Updates: Multiple Architectures Confirmed Fixed: Fixes verified on amd64, ppc, ppc64, hppa, and x86. GLSA Integration: The fix was incorporated into an existing GLSA request and resolved in GLSA 201310-10.

Goal Reached Thanks to every supporter — we hit 100%!

Gentoo GLSA 201310-10: PolarSSL Weak Diffie-Hellman and RSA Prime Generation Fix