Public bug reported: Ubuntu 24.04 LTS (Noble), source package `openssl`; affected `openssl` / `libssl3t64` version: `3.0.13-0ubuntu3.16`.
In libcrypto's `crypto/evp/names.c`, `evp_get_digestbyname_ex()` fails to resolve provider aliases such as `SHA2-256` and `SHA2-384` when they are absent from the application context's name map. The legacy OAEP/MGF1 digest getters consequently return success with NULL digest pointers. This causes CMS to encode SHA1 defaults even though the content key was wrapped using the requested SHA256 or SHA384. Encryption reports success, but decryption fails with `bad decrypt`. Correcting only the encoded parameters restores decryption. CMS-based SCEP clients, including certmonger using RSA-OAEP, can be affected. Expected: digest aliases resolve correctly and CMS parameters match the hashes used for encryption. The attached standalone OpenSSL reproducer tests AES128/AES256 with SHA1/SHA256/SHA384: two SHA1 cases pass; four SHA256/SHA384 cases fail. This CMS reproduction uses Ubuntu's FIPS provider; environment details are attached. The underlying lookup defect is generic, but this report does not establish non-FIPS CMS failure. Please backport the existing fix to Noble: - [OpenSSL issue #19338](https://github.com/openssl/openssl/issues/19338): the underlying provider digest-alias lookup defect. - [Commit 1dc48db3](https://github.com/openssl/openssl/commit/1dc48db3c76b7d36be34c3b707d084d364f41c83): fetch the unresolved algorithm and retry lookup; included in OpenSSL 3.0.15. - [Debian applied this fix](https://lists.debian.org/debian-release/2024/11/msg00238.html) in `3.0.15-1~deb12u1` in November 2024. The inspected Noble source lacks it. Attachments: `reproduce-native-oaep-roundtrip.sh`, `validation- evidence.txt`. ** Affects: openssl (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2172322 Title: Noble OpenSSL: missing digest-alias lookup fix causes incorrect CMS OAEP parameters To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/2172322/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
