Skip to content

Commit

Permalink
Update README.md
Browse files Browse the repository at this point in the history
  • Loading branch information
sungjungk committed Jul 18, 2019
1 parent 79b9463 commit 7b5d9d7
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion README.md
Expand Up @@ -14,7 +14,7 @@ Finally, the driver can de-obfuscate the image using provided key from the devic
- Key should remain encrypted during transfer operation
- CWE-319: Cleartext Transmission of Sensitive Information

[CVE-2019-13603, ] Initialization vector used for generating keystream is the same sequence of numbers each time.
[CVE-2019-13603, CVE-2019-13621] Initialization vector used for generating keystream is the same sequence of numbers each time.
In Windows, U.are.U 4500 Fingerprint Reader Windows Biometric Framework (WBF) 5.0.0.5 driver even has a statically coded initialization vector.
In Linux, libfprint 0.99 driver uses predictable initialization vector, that are generated by 'rand()' in libc by default.
- Initialization vector should also be in no predictable pattern
Expand All @@ -35,6 +35,7 @@ The initialization vector can be also extrapolated since it has been a staticall
2019-06-13: CERT/CC have recommended choosing a target date for public disclosure and proceeding with disclosure.
2019-06-13: CVE-2019-12813 has been assigned.
2019-07-15: CVE-2019-13603 has been assigned.
2019-07-17: CVE-2019-13621 has been assigned.

# How to build
You require the following to build this project:
Expand Down

0 comments on commit 7b5d9d7

Please sign in to comment.