ECC_Attacks

楕円曲線暗号に対する既知の攻撃 はじめに 楕円曲線入門 暗号の文脈における楕円曲線 ECC攻撃 ECDH攻撃 生成元の位数が小さすぎる 生成元の位数がスムーズ数である 生成元の位数がほぼスムーズ数であり、秘密鍵が小さい 点が曲線上にあることを検証していない 曲線が特異である 曲線が超特異である 曲線が異常である ECDSA攻撃 メッセージに署名する前にハッシュ化していない 異なる署名で同じkの値を再利用する kの値を安全でない方法で生成する 生成元が有効であることを検証していない 結論 ECDH攻撃の概要 ECDSA攻撃の概要 これらの攻撃への対策 参考文献 はじめに...

libsodium

Sodium — это простая в использовании программная библиотека, предоставляющая широкий спектр криптографических операций, включая шифрование, дешифрование, цифровые подписи и безопасное хеширование паролей. Это портативный, кросскомпилируемый, устанавливаемый и пакуемый форк NaCl. Сохраняя...

securesystemslib

securesystemslib Securesystemslib는 디지털 서명의 생성과 검증을 위한 암호화 인터페이스입니다. TUF 및 in-toto 프로젝트를 위해 개발되었으며, 키와 서명 컨테이너는 해당 프로젝트의 메타데이터 형식과 호환됩니다. 내부적으로 Securesystemslib는 다양한 디지털 서명 시스템예: cryptography, PIV 하드웨어 키, 여러 클라우드 기반 키 관리 시스템을 사용할 수 있습니다. 설치 기본 설치는 순수 Python ed25519 서명 검증만 지원합니다. 다른 체계와 서명 생성을 활성화하...

Crypton

Crypton Crypton — это образовательная библиотека для изучения и практики наступательной и оборонительной криптографии. По сути, это сборник объяснений и реализаций всех существующих уязвимостей и атак на различные системы шифрования симметричные и асимметричные, цифровые подписи, коды...

CVE-2026-16230

The Formidable Digital Signatures plugin for WordPress is vulnerable to file deletion due to insufficient file path validation in the deletefile function in all versions up to, and including, 3.0.6. This makes it possible for unauthenticated attackers to delete files on the server by supplying an...

CVE-2026-16230

The CVE concerns the Formidable Digital Signatures plugin for WordPress, where the delete_file function fails to validate file paths in all versions up to 3.0.6. This allows unauthenticated attackers to delete files on the server by submitting an attacker-controlled filename via item_meta[field_i...

EUVD-2026-56928

The Formidable Digital Signatures plugin for WordPress is vulnerable to file deletion due to insufficient file path validation in the deletefile function in all versions up to, and including, 3.0.6. This makes it possible for unauthenticated attackers to delete files on the server by supplying an...

CVE-2026-16230

The Formidable Digital Signatures plugin for WordPress is vulnerable to file deletion due to insufficient file path validation in the deletefile function in all versions up to, and including, 3.0.6. This makes it possible for unauthenticated attackers to delete files on the server by supplying an...

CVE-2026-16230 Formidable Digital Signatures <= 3.0.6 - Unauthenticated Arbitrary File Deletion via Signature Field

The Formidable Digital Signatures plugin for WordPress is vulnerable to file deletion due to insufficient file path validation in the deletefile function in all versions up to, and including, 3.0.6. This makes it possible for unauthenticated attackers to delete files on the server by supplying an...

PT-2026-70887

The Formidable Digital Signatures plugin for WordPress is vulnerable to file deletion due to insufficient file path validation in the delete file function in all versions up to, and including, 3.0.6. This makes it possible for unauthenticated attackers to delete files on the server by supplying a...

Thermo Fisher Patches Forensic DNA File Tampering Flaw in Its Software

Thermo Fisher patched CVE-2026-17583 in five supported DNA analysis products by adding digital signatures that help laboratories detect modified forensic files...

Thermo Fisher Patches Flaw That Could Make DNA File Tampering Nearly Undetectable

Thermo Fisher Scientific has patched a flaw in select Applied Biosystems human identification software that could allow data files to be altered before analysis software loads them. The vendor's July 31 security bulletin says nearly undetectable changes to .fsa and .hid outputs could occur if...

github.com/sigstore/sigstore-go: sigstore-go: Signature bypass allows acceptance of bundles signed with expired keys

A flaw was found in sigstore-go, a software library used for verifying digital signatures. This vulnerability specifically affects the workflow for self-managed long-lived signing keys that do not use certificates. An attacker who possesses an expired signing key can exploit this by creating and...

CVE-2026-52688

RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...

Trump Order Sets 2030 Deadline for Federal Post-Quantum Crypto Migration

President Trump signed an executive order on June 22 setting hard deadlines for federal agencies to move high-value assets and high-impact systems to post-quantum cryptography. Key establishment must move by December 31, 2030; digital signatures by December 31, 2031. EO 14409 leaves national...

`pqcrypto` is unmaintained: upstream PQClean project being archived

The pqcrypto crate and the entire pqcrypto- ecosystem wrap C implementations from PQClean. The PQClean project is being archived in or after July 2026 see PQClean/PQClean604, after which no further security patches, algorithm updates, or bug fixes will be applied to the upstream implementations. ...

RUSTSEC-2026-0164 `pqcrypto` is unmaintained: upstream PQClean project being archived

The pqcrypto crate and the entire pqcrypto- ecosystem wrap C implementations from PQClean. The PQClean project is being archived in or after July 2026 see PQClean/PQClean604, after which no further security patches, algorithm updates, or bug fixes will be applied to the upstream implementations. ...

EUVD-2026-31735

PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification...

Astra Linux – Vulnerability in LibreOffice

LibreOffice supports digital signatures for ODF documents and macros within documents. It provides visual aids to indicate that the document has not been altered since the last signature, and that the signature is valid. A vulnerability in certificate validation in LibreOffice allowed attackers t...

Crypt::DSA 安全特征问题漏洞

Crypt::DSA is a Perl cryptography module developed by TIMLEGGE’s individual developers, which supports the generation and verification of DSA digital signatures. Versions of Crypt::DSA prior to version 1.20 had security vulnerabilities. These vulnerabilities stemmed from the use of the Perl...