CVE-2021-37588

EUVD-2021-24146
In Charm 0.43, any two users can collude to achieve the ability to decrypt YCT14 data.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.9 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 50%
Affected Products (NVD)
VendorProductVersion
jhucharm
0.43
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://eprint.iacr.org/2020/460
https://github.com/JHUISI/charm/blob/dev/charm/schemes/abenc/abenc_yct14.py
https://github.com/JHUISI/charm/issues/276
https://www2.hci.uni-hannover.de/papers/Tan2019.pdf
https://eprint.iacr.org/2020/460
https://github.com/JHUISI/charm/blob/dev/charm/schemes/abenc/abenc_yct14.py
https://github.com/JHUISI/charm/issues/276
https://www2.hci.uni-hannover.de/papers/Tan2019.pdf