Dual Elliptic Curve Deterministic Random Bit Generation Predictable Random Number Generator Weakness

Bugtraq ID:	63657
Class:	Design Error
CVE:	CVE-2007-6755
Remote:	Yes
Local:	No
Published:	Sep 20 2013 12:00AM
Updated:	Jul 15 2015 12:56AM
Credit:	The vendor reported this issue.
Vulnerable:	EMC Data Protection Advisor 5.8.1
Not Vulnerable:

Dual Elliptic Curve Deterministic Random Bit Generation Predictable Random Number Generator Weakness

The Dual Elliptic Curve Deterministic Random Bit Generation (Dual_EC_DRBG) algorithm is prone to a predictable random number generator weakness.

Attackers can leverage this weakness to aid in brute-force attacks. Other attacks are also possible.

Products that implement Dual_EC_DRBG algorithm are vulnerable.

Dual Elliptic Curve Deterministic Random Bit Generation Predictable Random Number Generator Weakness

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Dual Elliptic Curve Deterministic Random Bit Generation Predictable Random Number Generator Weakness

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Dual Elliptic Curve Deterministic Random Bit Generation Predictable Random Number Generator Weakness

References: