In Bouncy Castle JCE Provider the ECIES implementation allowed the use of ECB mode · CVE-2016-1000352 · GitHub Advisory Database · GitHub

In Bouncy Castle JCE Provider the ECIES implementation allowed the use of ECB mode

High severity GitHub Reviewed Published Oct 17, 2018 to the GitHub Advisory Database • Updated Jan 9, 2023

Package

org.bouncycastle:bcprov-jdk14 (Maven)

Affected versions

< 1.56

Patched versions

1.56

org.bouncycastle:bcprov-jdk15 (Maven)

< 1.56

1.56

Description

In the Bouncy Castle JCE Provider version 1.55 and earlier the ECIES implementation allowed the use of ECB mode. This mode is regarded as unsafe and support for it has been removed from the provider.

References

Published to the GitHub Advisory Database Oct 17, 2018

Reviewed Jun 16, 2020

Last updated Jan 9, 2023