Skip to content

Commit 62867f6

Browse files
committed
docs: update bugs.md
Re-title page since many of these are specific to the test harness code that was removed (accessible in git history @ rev cd27d64). Additionally, remove notes about tests to-be-released. It's been years since these notes were added to the file and it seems unlikely anyone will revisit their state.
1 parent 88c8833 commit 62867f6

File tree

1 file changed

+7
-8
lines changed

1 file changed

+7
-8
lines changed

doc/bugs.md

Lines changed: 7 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,4 @@
1-
# Bugs found by Project Wycheproof
2-
See [list of issues](issues.md) for details.
1+
# Historic bugs found by Project Wycheproof
32

43
## Package OpenJDK
54

@@ -46,10 +45,10 @@ See [list of issues](issues.md) for details.
4645
## Package Go JOSE (https://github.com/square/go-jose)
4746
| Summary | Credits | CVE | Upstream Acknowledgement | Tests |
4847
|:---------------------------: |:--------------------------:|:-----------------:|:--------------------------------------: |:---------------------------------------:
49-
| ECDH Invalid Curve Attack | Quan Nguyen | CVE-2016-9121 | $5500 total by Square Inc. for all bugs | To be released |
50-
| Multiple signatures, auth bypass | Quan Nguyen | CVE-2016-9122 | | To be released |
51-
| Integer overflow, HMAC bypass | Quan Nguyen | CVE-2016-9123 | | To be released |
52-
| Accepts embedded HMAC key | Quan Nguyen | N/A | | To be released |
48+
| ECDH Invalid Curve Attack | Quan Nguyen | CVE-2016-9121 | $5500 total by Square Inc. for all bugs | |
49+
| Multiple signatures, auth bypass | Quan Nguyen | CVE-2016-9122 | | |
50+
| Integer overflow, HMAC bypass | Quan Nguyen | CVE-2016-9123 | | |
51+
| Accepts embedded HMAC key | Quan Nguyen | N/A | | |
5352

5453
## Package Go crypto
5554

@@ -61,8 +60,8 @@ See [list of issues](issues.md) for details.
6160
## Package Nimbus JOSE+JWT (https://connect2id.com/products/nimbus-jose-jwt)
6261
| Summary | Credits | CVE | Upstream Acknowledgement | Tests |
6362
|:---------------------------: |:--------------------------:|:-----------------:|:--------------------------------------: |:---------------------------------------:
64-
| CBC-HMAC is vulnerable to padding oracle attack | Quan Nguyen | N/A | https://goo.gl/ACZQeI | To be released
65-
| CBC-HMAC integer overflow, HMAC bypass | Quan Nguyen | N/A | https://goo.gl/ACZQeI | To be released
63+
| CBC-HMAC is vulnerable to padding oracle attack | Quan Nguyen | N/A | https://goo.gl/ACZQeI |
64+
| CBC-HMAC integer overflow, HMAC bypass | Quan Nguyen | N/A | https://goo.gl/ACZQeI |
6665

6766
## Package OpenSSL
6867
| Summary | Credits | CVE | Upstream Acknowledgement | Tests |

0 commit comments

Comments
 (0)