Executive Summary

This vulnerability exists in wolfSSL's ECCSI signature verifier function called wc_VerifyEccsiHash. The function decodes the r and s scalars from the signature blob without verifying that these values lie within the valid range [1, q-1]. Because of this lack of validation, an attacker can craft a forged signature that will verify successfully against any message for any identity, using only publicly-known constants.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability allows an attacker to create forged signatures that will be accepted as valid for any message and any identity. This undermines the integrity and authenticity guarantees normally provided by the ECCSI signature verification process, potentially allowing unauthorized actions, data tampering, or impersonation within systems relying on wolfSSL's ECCSI signature verification.

Useful 0 Not Useful 0