[Bitcoin-development] Full Disclosure: CVE-2012-2459 (block merkle calculation exploit)

2012-08-21 Thread Forrest Voight
Since at least 80% of the Bitcoin network is now protected against this attack, I've been given permission to disclose it: The Merkle hash implementation that Bitcoin uses to calculate the Merkle root in a block header is flawed in that one can easily construct multiple lists of hashes that map t

Re: [Bitcoin-development] Full Disclosure: CVE-2012-2459 (block merkle calculation exploit)

2012-08-21 Thread Luke-Jr
On Wednesday, August 22, 2012 2:25:20 AM Forrest Voight wrote: > An unpatched Bitcoin installation can be permanently wedged at its > current highest block using this and the fact that Bitcoin caches > orphan blocks in a disk-backed database. To do so, the attacker must > send it a valid block (tha