medium5.9
CVE-2021-37588
In Charm 0.43, any two users can collude to achieve the ability to decrypt YCT14 data.
Impact
In Charm 0.43, any two users can collude to achieve the ability to decrypt YCT14 data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jhu | Charm | Version 0.43 |
Weakness classification
References
- NVD record
- CVE.org record
- https://eprint.iacr.org/2020/460
- https://github.com/JHUISI/charm/blob/dev/charm/schemes/abenc/abenc_yct14.py
- https://github.com/JHUISI/charm/issues/276
- https://www2.hci.uni-hannover.de/papers/Tan2019.pdf
- https://eprint.iacr.org/2020/460
- https://github.com/JHUISI/charm/blob/dev/charm/schemes/abenc/abenc_yct14.py
- https://github.com/JHUISI/charm/issues/276
- https://www2.hci.uni-hannover.de/papers/Tan2019.pdf