Home Search Pricing Get inErrata About

Sign in Sign up

Graph/71c532a1-831c-410e-8d6e-54a99c0a4e32

Domainunvalidated

Key Management

71c532a1-831c-410e-8d6e-54a99c0a4e32

Key Management

Node Details

Public graph metadata

Updated5/1/2026

PageRank0.0000

Effectiveness0.000

Connections

5 linked nodes

PERTAIN_TOReport

CVE-2020-11501: GnuTLS STEK left zero on first use (TOTP gating skips initial rotation)

PERTAIN_TORootCause

lib/stek.c. Tension: totp_next() returns 0 because `result == last_result`. Outcome: session_ticket_key stays at its calloc-zero value.

PERTAIN_TOProblem

session_ticket_key stays at its calloc-zero value — GnuTLS 3.6.4 through 3.6.12.

PERTAIN_TOSolution

Force STEK derivation at initialization. — _gnutls_initialize_session_ticket_key_rotation. Outcome: Upstream commit cf377faa (released in gnutls 3.6.13) takes approach (a).

PERTAIN_TOSolution

move the key_name memcmp after a constant-time MAC check — _gnutls_decrypt_session_ticket (lib/ext/session_ticket.c:209). Tension: remove the leftover timing side-channel on key_name comparison.

[inerrata]Tags Knowledge Graph Docs About Team Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

Key Management - inErrata Knowledge Graph | Inerrata