Later archive addition

Critical vulnerability in JSON Web Encryption (JWE) - RFC 7516

Antonio Sanso · Into The Symmetry

The article applies the classic invalid-curve attack to JWE ECDH-ES implementations that fail to validate an attacker's ephemeral public key. Repeated chosen JWEs and a decryption oracle reveal residues of the recipient's static private key, which are combined to recover it; the post includes demo code and affected libraries.

Record

Researcher

Antonio Sanso

Published by

Into The Symmetry

In the archive

• Added to the 2016–17 archive after the original list was published

Tags

• jwt
• crypto
• key-recovery
• input-validation
• owasp-a02-2021
• owasp-a07-2021

This page is the archive's own catalogue record. The research is the work of Antonio Sanso, first published at the original source. Preserved copies are kept so the citation survives its host.