CVE-2021-33560

Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpipowm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP...

PT-2021-7065

Name of the Vulnerable Software and Affected Versions Libgcrypt versions 1.8.7 and earlier Libgcrypt versions 1.9.x before 1.9.3 Description The issue is related to the mishandling of ElGamal encryption due to the lack of exponent blinding, making it vulnerable to a side-channel attack against mp...

CVE-2021-33560

Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpipowm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP...

Information Disclosure

libgcrypt20:sid is vulnerable to information disclosure. It is due to a flaw in ElGamal encryption implementation...

[SECURITY] [DLA 1283-2] python-crypto security update

Package : python-crypto Version : 2.6-4+deb7u8 This is an update to DLA-1283-1. In DLA-1283-1 it is claimed that the issue described in CVE-2018-6594 is fixed. It turns out that the fix is partial and upstream has decided not to fix the issue as it would break compatibility and that ElGamal...

Libgcrypt Information Disclosure Vulnerability (CNVD-2018-05552)

Libgcrypt is a cryptographic library developed as an independent module of GnuPG. An information disclosure vulnerability exists in Libgcrypt versions 1.8.2 and earlier. The vulnerability arises because cipher/elgamal.c in Libgcrypt improperly encodes plaintext when used to directly encrypt...

PITA Side-Channel Crypto Key Attack

It’s unlikely that anyone envisioned the evolution of cryptographic key thievery to include leavened flatbread, but that’s where we’ve arrived. Researchers from Tel Aviv University in Israel are expected in September to present a paper at the Workshop on Cryptographic Hardware and Embedded System...

[SECURITY] [DLA 93-1] libgcrypt11 security update

Package : libgcrypt11 Version : 1.4.5-2+squeeze2 CVE ID : CVE-2014-5270 Daniel Genkin, Itamar Pipman and Eran Tromer discovered that Elgamal encryption subkeys in applications using the libgcrypt11 library, for example GnuPG 2.x, could be leaked via a side-channel attack see...

DLA-93-1 libgcrypt11 - security update

Bulletin has no description...

Debian DSA-3073-1 : libgcrypt11 - security update

Daniel Genkin, Itamar Pipman and Eran Tromer discovered that Elgamal encryption subkeys in applications using the libgcrypt11 library, for example GnuPG 2.x, could be leaked via a side-channel attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

Debian Security Advisory DSA 3073-1 (libgcrypt11 - security update)

Daniel Genkin, Itamar Pipman and Eran Tromer discovered that Elgamal encryption subkeys in applications using the libgcrypt11 library, for example GnuPG 2.x, could be leaked via a side-channel attack. OpenVAS Vulnerability Test $Id: deb3073.nasl 6759 2017-07-19 09:56:33Z teissa $ Auto-generated...

DSA-3073-1 libgcrypt11 - security update

Bulletin has no description...

[SECURITY] [DLA 53-1] gnupg security update

Package : gnupg Version : 1.4.10-4+squeeze6 CVE ID : CVE-2014-5270 Genkin, Pipman and Tromer discovered a side-channel attack on Elgamal encryption subkeys CVE-2014-5270. In addition, this update hardens GnuPGs behaviour when treating keyserver responses; GnuPG now filters keyserver responses to...

DLA-54-1 gnupg - security-update

Bulletin has no description...

[SECURITY] [DSA 3024-1] gnupg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3024-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst September 11, 2014 http://www.debian.org/security/faq -...

DSA-3024-1 gnupg - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3024-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 11.3 Security Update : libgcrypt (SAT Patch Number 9646)

This libgcrypt update fixes the following security issue : - Side-channel attack on Elgamal encryption subkeys. CVE-2014-5270. bnc892464 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The...

openSUSE Security Update : libgcrypt (openSUSE-SU-2014:1058-1)

libgcrypt was updated to 1.5.4 to prevent a side-channel attack on Elgamal encryption subkeys. Besides that the following issues were resolved : - Improved performance of RSA, DSA, and Elgamal by using a new exponentiation algorithm. - Fixed a subtle bug in mpisetbit which could set spurious bits...

Ubuntu: Security Advisory (USN-1484-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...