Freely subscribe to our NEWSLETTER

This bulletin was written by Vigil@nce : http://vigilance.fr/offer

SYNTHESIS OF THE VULNERABILITY
An attacker, who can access to a wallet encrypted with KWallet,
may potentially decipher it more easily.

Impacted products: Unix (platform)

Severity: 1/4

Creation date: 09/01/2015

DESCRIPTION OF THE VULNERABILITY

The KWallet product is used to store passwords by encrypting them.

However, the wallet is encrypted using the ECB (Electronic Code
Book) algorithm instead of CBC (Cipher Block Chaining). Identical
blocks thus produce identical cyphers, which may be used to make
their decryption easier.

An attacker, who can access to a wallet encrypted with KWallet,
may therefore potentially decipher it more easily.

ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN

http://vigilance.fr/vulnerability/KWallet-ECB-encryption-15941