MEDIUM
GHSA-f659-372h-6x3x
netty-incubator-codec-ohttp's HPKEContext operations may produce empty byte[] on failures
Details
HKDF_expand: returns non-NULL on failure. The byte[] is filled with zeros and has no way to distinguish success from failure. Since this output is used as HKDF key material for the response AEAD, a failure silently produces an all-zero key.
When EVP_HPKE_CTX_export fails it also returns an empty byte[] array filled with zeros. This byte[] feeds directly into OHttpCrypto.createResponseAEAD(...). A silent all-zero export secret would produce a deterministic, attacker-predictable AEAD key.
Are you affected?
Enter the version of the package you're using.
Affected packages
Maven / io.netty.incubator:netty-incubator-codec-ohttp
Introduced in:
0 Fixed in: 0.0.21.Final Fix
# pom.xml: bump <version>0.0.21.Final</version> for io.netty.incubator:netty-incubator-codec-ohttp