CyberRota Analysis
AI-GeneratedOpenSSL versions prior to 1.4.9 are vulnerable due to the use of an insufficiently parameterized PBKDF2-HMAC-SHA256, employing only 100,000 iterations for PQC keyfile protection and 10,000 iterations for dual-encryption file-password verification. This weakness allows attackers to potentially brute-force wrapping passwords offline, leveraging GPU or ASIC acceleration, which could lead to unauthorized access to sensitive encrypted data. Organizations utilizing affected OpenSSL versions should prioritize updating to mitigate the risk of keyfile and encrypted file compromise.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
openssl_encrypt versions before 1.4.9 use under-parameterized PBKDF2-HMAC-SHA256 with only 100,000 iterations to protect PQC keyfile private keys and 10,000 iterations for dual-encryption file-password verification. Attackers who obtain keyfiles or encrypted files can brute-force wrapping passwords offline using GPU or ASIC acceleration.