Elements accumulated in a Baric-Pfitzmann-accumulator must be prime, see Niko Barić and Birgit Pfitzmann, Collision-Free Accumulators and Fail-Stop Signature Schemes Without Trees .
This renders all algorithms using the BPAccumulator insecure. Affected xmlrss algorithm identifiers:
- GSRSSwithRSAandBPA (RedactableSignature, RedactableXMLSignature, KeyPairGenerator)
- GLRSSwithRSAandBPA (RedactableSignature, RedactableXMLSignature, KeyPairGenerator)
- BPA (Accumulator)
Elements accumulated in a Baric-Pfitzmann-accumulator must be prime, see Niko Barić and Birgit Pfitzmann, Collision-Free Accumulators and Fail-Stop Signature Schemes Without Trees .
This renders all algorithms using the BPAccumulator insecure. Affected xmlrss algorithm identifiers: