Skip to content

AES_TAG is Leaked #4

@jmp0x7c00

Description

@jmp0x7c00

the variable AES_TAG is security-critical, but it is written into an untrusted file by plaintext:

status = OCALL_SaveFile(MAC_filename.c_str(), MAC_filename.length() + 1, AES_TAG, 16);

An attacker can open the file to get the AES_TAG easily.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions