Vulnerability Analysis on the CNG Crypto Library

By a spread of utilizing environment of the CNG library, it is required to analyze its vulnerability. For this reason, in this paper, we analyzed potential security vulnerability of CNG. To prove the found vulnerability, we implemented a proof of-concept tool based on the details of the vulnerability and proposed a countermeasure. This study is expected to improve security criteria for various applications to fully take advantage of the CNG library.