National Vulnerability Database (CVE-2005-1797)

National Cyber-Alert System Vulnerability Summary: CVE-2005-1797
Orirignal release date: 2005-05-26 Source: US-CERT/NIST ### Overview The design of Advanced Encryption Standard (AES), aka Rijndael, allows remote attackers to recover AES keys via timing attacks on S-box lookups, which are difficult to perform in constant time in AES implementations. ### Impact CVSS Severity: 7 (High) Range: remote Authentication: design,race Impact Type: sec_prot ### Reference to Advisories, Solutions, and Tools External Source: MISC Name: http://cr.yp.to/antiforgery/cachetiming-20050414.pdf Hyperlink: http://cr.yp.to/antiforgery/cachetiming-20050414.pdf External Source: BID Name: 13785 Hyperlink: http://www.securityfocus.com/bid/13785 ### Vulnerable Software and Vendor OpenSSL (OpenSSL Project) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1797