Cryptographic API Misuse Vulnerability

[lialon]

Description:

In the "scapy-ssl_tls/scapy_ssl_tls/ssl_tls_crypto.py", I have identified security vulnerabilities about insecure cryptographic algorithm. PKCS1v1.5 is vulnerable to the chosen-ciphertext attack.

Location:

https://github.com/tintinweb/scapy-ssl_tls/blob/master/scapy_ssl_tls/ssl_tls_crypto.py#L407

self.premaster_secret = PKCS1_v1_5.new(private).decrypt(self.encrypted_premaster_secret, None)

https://github.com/tintinweb/scapy-ssl_tls/blob/master/scapy_ssl_tls/ssl_tls_crypto.py#L541

self.encrypted_premaster_secret = PKCS1_v1_5.new(public).encrypt(cleartext)

Reference

• CWE-780: Use of RSA Algorithm without OAEP

Recommendations:

Try using other padding(OAEP) instead of PKCS1v1.5.