libgcrypt: secret key extraction

2016-02-24T00:00:00
ID ASA-201602-19
Type archlinux
Reporter Arch Linux
Modified 2016-02-24T00:00:00

Description

A vulnerability was found in a way the ECDH encryption algorithm decrypts data. An attacker with a specialized setup can extract the secret decryption key from a target located in an adjacent room within seconds. This is done by measuring the target's electromagnetic emanations.