FreeHSM C versions 1.1.0 through 1.2.1 incorrectly applied a default SHA-256 digest during raw CKM_ECDSA and CKM_RSA_PKCS signing operations, causing signatures to be unverifiable by third-party systems. The module's internal verification logic masked the issue by applying the same default digest, but external verifiers expecting raw input digests rejected the signatures. This affected all signed releases over a 15-day period.
| Vendor | Product | Versions |
|---|---|---|
| afchine | freehsm c | 1.1.0 - 1.2.1 |
