The 2021 Pwnie Winner For Best Cryptographic Attack


Publication Citation: None (see link)

Researcher Names: None


NSA discovered a bug in the verification of signatures in Windows which breaks the certificate trust chain.  This is the first time a crypto bug had real world impact, and NSA disclosed it through the vulnerability equities process (VEP).