paranoid_crypto

Proyecto Paranoid Descripción general El proyecto Paranoid comprueba debilidades conocidas en artefactos criptográficos, como claves públicas, firmas digitales y números pseudoaleatorios en general. Esta biblioteca contiene implementaciones y optimizaciones de trabajos existentes en la literatura...

ecdsa-private-key-recovery

ecdsa-key-recovery Execute ataques de recuperação de chave privada por reutilização de nonce em ECDSA e DSA Uma ferramenta de pesquisa criptográfica para analisar vulnerabilidades em assinaturas Vamos recuperar a chave privada de duas assinaturas que compartilham o mesmo nonce k. Observe como...

CVE-2022-21449

CVE 2022 21449 python implementation Questo progetto permette di: Tracciare una curva ellittica con i parametri desiderati, su un corpo finito o no Generare una coppia di chiavi a partire da una curva ellittica data Crittografare / Decrittografare un messaggio con ECIES Firmarlo / verificarlo...

CVE-2026-21009-ECDSA-Nonce-Reuse-in-IoT-Firmware-Signing

CVE-2026-21009 – IoT फ़र्मवेयर हस्ताक्षर में ECDSA नॉन्स पुन: उपयोग प्रोग्राम कोड Python root@kitploit: ecdsanoncereusesim.py - Signing firmware with repeated nonce k import ecdsa, hashlib sk = ecdsa.SigningKey.generatecurve=ecdsa.NIST256p vk = sk.getverifyingkey Sign two different firmware image...

hsm

zhsm Eine Hardware Security Module HSM -Bibliothek für Zig mit PC/SC-Zugriff auf PIV -, CAC - und YubiKey -Token. Status Aspekt| Info ---|--- API-Stabilität| Entwicklung Zig-Version| 0.16.0 Plattformen| Linux, macOS, Windows Lizenz| MIT Funktionen PIV-Unterstützung NIST SP 800-73-4...

Astra Linux – Vulnerability in mbedtls

A vulnerability was discovered in Arm Mbed TLS before versions 2.16.6 and 2.7.x, prior to 2.7.15. An attacker who can obtain precise side-channel measurements can recover the long-term ECDSA private key by 1 reconstructing the projective coordinates of the result of scalar multiplication by...

Astra Linux – Vulnerability in Thunderbird, Firefox

When importing an SPKI RSA public key as an ECDSA P-256 key, the key is handled incorrectly, causing the tab to crash. This vulnerability affects Firefox 110, Thunderbird 102.8, and Firefox ESR 102.8...

Astra Linux – Vulnerability in bind9

By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode the available memory to the point where named crashes occur due to lack of resources...

ANT-2026-110HTZ5M · jsrsasign · Cryptographically Weak PRNG / Predictable ECDSA Nonce

other high Severity Claude high · Security research firm high · Maintainer - REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-110HTZ5M: jsrsasign npm — ECDSA nonce RNG seeded entirely from Math.random in Node.js The npm wrapper at...

CVE-2026-43606

Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or electromagnetic emanation attacks, resulting in high confidentiality and integrity impact due to the exposure of private cryptograph...

EUVD-2026-56555

Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or electromagnetic emanation attacks, resulting in high confidentiality and integrity impact due to the exposure of private cryptograph...

CVE-2026-43606

Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or electromagnetic emanation attacks, resulting in high confidentiality and integrity impact due to the exposure of private cryptograph...

CVE-2026-43606

Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or electromagnetic emanation attacks, resulting in high confidentiality and integrity impact due to the exposure of private cryptograph...

CVE-2026-43606

CVE-2026-43606 concerns the AMD Vitis Libraries ECDSA secp256k1 component. The vulnerability is described as an observable timing discrepancy that an attacker with local access could use to perform timing analysis or electromagnetic emanation attacks, with high confidentiality and integrity impac...

PT-2026-70369

Name of the Vulnerable Software and Affected Versions AMD Vitis Libraries affected versions not specified Description A timing discrepancy exists in the ECDSA secp256k1 component. This issue allows attackers with local access to conduct timing analysis or electromagnetic emanation attacks, which...

ROOT-APP-PYPI-CVE-2026-33936 CVE-2026-33936 in ecdsa - Patched by Root

Root has patched CVE-2026-33936 in the ecdsa package for Root:PyPI. Multiple fixed versions available...

CVE-2026-62995

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. in versions 1.7.1 and prior, joserfc accepts JWTs with trailing padding == which are not conforming to the JOSE specifications. This leads to malleability of the JWTs when...

EUVD-2026-50450

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. in versions 1.7.1 and prior, joserfc accepts JWTs with trailing padding == which are not conforming to the JOSE specifications. This leads to malleability of the JWTs when...

JLSEC-2026-675

An issue was discovered in wolfSSL before 5.5.0. A fault injection attack on RAM via Rowhammer leads to ECDSA key disclosure. Users performing signing operations with private ECC keys, such as in server-side TLS connections, might leak faulty ECC signatures. These signatures can be processed via ...

JLSEC-2026-682 Generating the ECDSA nonce k samples a random number r and then truncates this randomness with a...

Generating the ECDSA nonce k samples a random number r and then truncates this randomness with a modular reduction mod n where n is the order of the elliptic curve. Meaning k = r mod n. The division used during the reduction estimates a factor qe by dividing the upper two digits a digit having e....