Type confusion in OpenSSL's X.400 address handling (CVE-2023-0286)
A public header said ASN1_TYPE, the ASN.1 template produced an ASN1_STRING, and one comparison function stood between the two.
found by David Benjamin (Google); fix by Hugo Landau
crypto
Proof of nothing: TLS 1.3 authentication bypasses in wolfSSL
How a black-box state machine learner found two ways to skip the only part of TLS 1.3 that proves who you are.
found by Aina Toky Rasoamanana and Olivier Levillain, Télécom SudParis
Reflected public keys: recovering the six digits of Bluetooth Passkey Entry
Bluetooth Passkey Entry spends a bit of the passkey per round so it can never be brute-forced offline. Reflect the initiator's public key back at it and it hands over one bit per round instead.
found by Tristan Claverie and José Lopes Esteves, ANSSI