Oberon PSA Crypto Library RSA-OAEP Padding Vulnerability

A vulnerability exists in Oberon microsystems AG's Oberon PSA Crypto library in all versions prior to 1.5.1. The issue arises from the incorrect use of an all-zero seed for RSA-OAEP padding, rather than utilizing generated random bytes. This flaw leads to deterministic RSA encryption, allowing guessable messages to be intercepted, repeated messages to be recognized, and undermining security proofs.

Impact

The vulnerability results in a loss of confidentiality for guessable messages, allowing them to be intercepted and recognized when repeated.

Remediation

Users are advised to upgrade to Oberon PSA Crypto version 1.5.1 or later, where this vulnerability has been addressed.