Skip to content
CVE PROGRAM SOURCE RECORD2.3 Low

CVE-2025-9071

Insecure RSA-OAEP implementation with all-zero seed for padding in Oberon PSA Crypto

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NCSC.ch

Description

Erroneously using an all-zero seed for RSA-OEAP padding instead of the generated random bytes, in Oberon microsystems AG’s Oberon PSA Crypto library in all versions up to 1.5.1, results in deterministic RSA and thus in a loss of confidentiality for guessable messages, recognition of repeated messages, and loss of security proofs.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Oberon microsystems AG Oberon PSA Crypto

Default version status: unaffected

  • 1.0.0 to ≤ 1.5.1affected

References