libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This side-channel requires that attacker can run arbitrary software on the hardware where the private RSA key is used.

🗓️ 04 Sep 2025 03:10:01Reported by MicrosoftType

Libgcrypt before 1.7.8 has a cache side-channel that can break public key cryptography when using left to right sliding window; attacker can run arbitrary software.

Reporter	Title	Published	Views	Family All 122
IBM Security Bulletins	Security Bulletin: A vulnerability in libgcrypt affects IBM Flex System Manager (FSM) (CVE-2017-7526)	18 Jun 201801:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in libgcrypt affects IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter Systems	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in libgcrypt affects IBM Chassis Management Module (CVE-2017-7526)	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities affect IBM® Cloud Private	20 Jul 201818:56	–	ibm
IBM Security Bulletins	Security Bulletin: A Security Vulnerability could affect IBM® Cloud Private (CVE-2017-7526)	19 Nov 201815:40	–	ibm
FreeBSD	gnupg -- unsanitized output (CVE-2018-12020)	7 Jun 201800:00	–	freebsd
FreeBSD	libgcrypt -- side-channel attack on RSA secret keys	29 Jun 201700:00	–	freebsd
AlpineLinux	CVE-2017-7526	26 Jul 201813:00	–	alpinelinux
ArchLinux	[ASA-201707-1] libgcrypt: private key recovery	3 Jul 201700:00	–	archlinux