◄ Wiki / Crypto
BERserk
A family of vulnerabilities that forge RSA signatures by exploiting sloppy padding checks.
BERserk names a class of flaws where a verifier parses PKCS#1 signature padding too leniently, letting an attacker craft a fake signature that passes as valid — without the private key. It is a descendant of the earlier Bleichenbacher forgery, both rooted in accepting malformed ASN.1/BER encoding. The lesson is that signature verification must parse padding strictly.
See also
- Bleichenbacher forgeryA 2006 attack that forges RSA signatures when padding is parsed too loosely.
- AEADEncryption that both hides data and proves it wasn't tampered with.
- AESThe standard symmetric cipher used to encrypt data with a shared secret key.