CVE-2016-9121
CriticalSummary
The go-jose library before version 1.0.4 is vulnerable to an invalid curve attack in the ECDH-ES algorithm. When deriving a shared key, go-jose fails to check that the received public key is on the same curve as the receiver's static private key.
Risk Assessment
An attacker could exploit this vulnerability to capture the encryption key, leading to the decryption of sensitive data. This poses a significant threat to the security of communications within the organization.
Recommendation
It is recommended to update the go-jose library to version 1.0.4 or later to mitigate this attack. Additionally, implementing curve verification mechanisms in the used ECDH algorithms is advisable.
Original NVD description (English source)
go-jose before 1.0.4 suffers from an invalid curve attack for the ECDH-ES algorithm. When deriving a shared key using ECDH-ES for an encrypted message, go-jose neglected to check that the received public key on a message is on the same curve as the static private key of the receiver, thus making it vulnerable to an invalid curve attack.