Skip to content
Exploiting the Windows CryptoAPI Vulnerability
blog.trailofbits.com | vulnerability | #windows | #cryptography | #trail-of-bits | #code-signing | #cryptoapi | #spoofing | #ecc | #certificate-validation | #cve-2020-0601 | #certificate-forgery
Summary
Trail of Bits dissects the NSA-discovered Windows CryptoAPI flaw in Crypt32.dll, where improper ECC curve parameter validation lets attackers forge HTTPS and code-signing certificates.
- Published
- Collected