CVE-2016-1000343

In the Bouncy Castle JCE Provider version 1.55 and earlier the DSA key pair generator generates a weak private key if used with default values

published June 4, 2018

CVSS
—
EPSS
3%
Percentile
88.3
In the wild
Unconfirmed
What it is

In the Bouncy Castle JCE Provider version 1.55 and earlier the DSA key pair generator generates a weak private key if used with default values. If the JCA key pair generator is not explicitly initialised with DSA parameters, 1.55 and earlier generates a private value assuming a 1024 bit key size. In earlier releases this can be dealt with by explicitly passing parameters to the key pair generator.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03253 · 88.3th percentile
Published
2018-06-04T13:00Z
EPSS history
Timeline
  • 04 JUN 13:00Z
    In the Bouncy Castle JCE Provider version 1.55 and earlier the DSA key pair generator generates a weak private key if used with default values
    cvelistv5