boringssl

BoringSSL Audit Findings

Security audit of BoringSSL, Google's fork of OpenSSL. Each finding includes a detailed write-up and a patch.

Summary

Total findings: 12 -- High: 4, Medium: 8

Findings

Trust Token

#	Finding	Severity
001	Short metadata keys are accepted and stored	High
003	Issuer private key parser accepts trailing bytes	Medium

ASN.1 / DER encoding

#	Finding	Severity
021	Negative bit index writes before buffer start	High
022	Negative bit index reads before buffer start	Medium
023	Mismatched ANY tag re-encoded from ASN1_STRING metadata	Medium

Symmetric ciphers (RC2, RC4, AES-EAX)

#	Finding	Severity
016	AES-EAX seal/open length limit mismatch	Medium
024	RC2-CBC decrypt reads past short final block	High
027	RC4 zero-length key out-of-bounds read	High

KDF and PEM parsing

#	Finding	Severity
010	PBKDF2 block counter wraps for oversized keys	Medium
026	Missing DEK-Info delimiter check before IV parsing	Medium

EVP key handling

#	Finding	Severity
025	Raw key getters dereference missing method table	Medium

X.509 verification

#	Finding	Severity
035	Poison state cleared by clean param copy	Medium