sybrenstuvel / python-rsa / 280

90%

master: 92%

push

travis-ci

Fix CVE-2020-13757: detect cyphertext modifications by prepending zero bytes

Reject cyphertexts that have been modified by prepending zero bytes, by
checking the cyphertext length against the expected size (given the
decryption key). This resolves CVE-2020-13757.

The same approach is used when verifying a signature.

Thanks Carnil for pointing this out on https://github.com/sybrenstuvel/python-rsa/issues/146

4 of 4 new or added lines in 1 file covered. (100.0%)

809 of 903 relevant lines covered (89.59%)

4.45 hits per line