aboutsummaryrefslogtreecommitdiffhomepage
path: root/docs
diff options
context:
space:
mode:
authorPetr Svenda2024-10-02 18:27:46 +0200
committerJ08nY2024-10-30 22:40:39 +0100
commit667c5fd6144cbf74edbdf03a09acd64c54ad10e1 (patch)
treed23cebf8ea4a70ddd42e66ab23f23414f5e9e0e4 /docs
parent0e3fdbdfc30e2c56f7fe4e30dd2c53ba3df2547f (diff)
downloadsec-certs-667c5fd6144cbf74edbdf03a09acd64c54ad10e1.tar.gz
sec-certs-667c5fd6144cbf74edbdf03a09acd64c54ad10e1.tar.zst
sec-certs-667c5fd6144cbf74edbdf03a09acd64c54ad10e1.zip
removing ROCA-related search into FIPS as no hits are there
Diffstat (limited to 'docs')
-rw-r--r--docs/awesome_search_examples.md6
1 files changed, 3 insertions, 3 deletions
diff --git a/docs/awesome_search_examples.md b/docs/awesome_search_examples.md
index 2fa3df1b..484733b7 100644
--- a/docs/awesome_search_examples.md
+++ b/docs/awesome_search_examples.md
@@ -61,19 +61,19 @@ Certificates mentioning post-quantum cryptographic algorithms support.
### ROCA vulnerability
ROCA [CVE-2017-15361](https://nvd.nist.gov/vuln/detail/CVE-2017-15361) is private key recovery vulnerability present in Infineon RSALib library used by smartcard and TPM devices between roughly 2004 and 2017. More details available [here](https://crocs.fi.muni.cz/papers/rsa_ccs17).
-- ROCA-vulnerable Infineon RSALib library v1.02.013: [Common Criteria](https://sec-certs.org/cc/ftsearch/?q=v1.02.013&cat=abcdefghijklmop&status=any&type=any) ([:snowflake:](https://sec-certs.org/cc/network/?q=%22v1.02.013%E2%80%9C%20&cat=abcdefghijklmop&status=any&type=any&search=fulltext)), [FIPS140](https://sec-certs.org/fips/ftsearch/?q=v1.02.013&cat=abcdefghijklmop&status=Any&type=any) ([:snowflake:](https://sec-certs.org/fips/network/?q=v1.02.013&cat=abcdefghijklmop&status=Any&type=any&search=fulltext))
+- ROCA-vulnerable Infineon RSALib library v1.02.013: [Common Criteria](https://sec-certs.org/cc/ftsearch/?q=v1.02.013&cat=abcdefghijklmop&status=any&type=any) ([:snowflake:](https://sec-certs.org/cc/network/?q=%22v1.02.013%E2%80%9C%20&cat=abcdefghijklmop&status=any&type=any&search=fulltext)), no FIPS140
<br>
```v1.02.013```
<br>
Certificates mentioning confirmed vulnerable version of Infineon RSALib 1.02.013 library.
-- ROCA-vulnerable Infineon RSALib library and similar (wildcard) v1.02.0??: [Common Criteria](https://sec-certs.org/cc/ftsearch/?q=v1.02.0**&cat=abcdefghijklmop&status=any&type=any) ([:snowflake:](https://sec-certs.org/cc/network/?q=v1.02.0**&cat=abcdefghijklmop&status=any&type=any&search=fulltext)), [FIPS140](https://sec-certs.org/fips/ftsearch/?q=v1.02.0**&cat=abcdefghijklmop&status=Any&type=any) ([:snowflake:](https://sec-certs.org/fips/network/?q=v1.02.0**&cat=abcdefghijklmop&status=Any&type=any&search=fulltext))
+- ROCA-vulnerable Infineon RSALib library and similar (wildcard) v1.02.0??: [Common Criteria](https://sec-certs.org/cc/ftsearch/?q=v1.02.0**&cat=abcdefghijklmop&status=any&type=any) ([:snowflake:](https://sec-certs.org/cc/network/?q=v1.02.0**&cat=abcdefghijklmop&status=any&type=any&search=fulltext)), no FIPS140
<br>
```v1.02.0**```
<br>
Certificates mentioning Infineon RSALib 1.02.013 and other similar library versions. Versions v1.02.008, v1.02.010, v1.02.014 possibly also vulnerable.
-- ROCA-vulnerable (likely) Infineon RSALib libraries other than v1.02.013: [Common Criteria](https://sec-certs.org/cc/ftsearch/?q=v1.02.0**%20NOT%20v1.02.013&cat=abcdefghijklmop&status=any&type=any) ([:snowflake:](https://sec-certs.org/cc/network/?q=v1.02.0**%20NOT%20v1.02.013&cat=abcdefghijklmop&status=any&type=any&search=fulltext)), [FIPS140](https://sec-certs.org/fips/ftsearch/?q=v1.02.0**%20NOT%20v1.02.013&cat=abcdefghijklmop&status=Any&type=any) ([:snowflake:](https://sec-certs.org/fips/network/?q=v1.02.0**%20NOT%20v1.02.013&cat=abcdefghijklmop&status=Any&type=any&search=fulltext))
+- ROCA-vulnerable (likely) Infineon RSALib libraries other than v1.02.013: [Common Criteria](https://sec-certs.org/cc/ftsearch/?q=v1.02.0**%20NOT%20v1.02.013&cat=abcdefghijklmop&status=any&type=any) ([:snowflake:](https://sec-certs.org/cc/network/?q=v1.02.0**%20NOT%20v1.02.013&cat=abcdefghijklmop&status=any&type=any&search=fulltext)), no FIPS140
<br>
```v1.02.0** NOT v1.02.013```
<br>