833 matches found
CVE-2004-2721
The CheckGroup function in openSkat VTMF before 2.1 generates public key pairs in which the "p" variable might not be prime, which allows remote attackers to determine the private key and decrypt messages...
kgpg uncrypted private key
Passphrase not used if keys are generated through wizard...
Signed content spoofing in ECDSA
Standard allows to generate private key in a way it will produce same signature for 2 different documents...
nCipher Advisory #3: MSCAPI keys erroneously module-protected - update
nCipher Security Advisory No. 3 | Windows 2000 keys unexpectedly only module-protected | ==================================================== | | UPDATED - VERSION 2 | Changes are marked with |' at the right. | | | SUMMARY ======= In certain circumstances, the nCipher MSCAPI CSP Install Wizard...
nCipher problems
Weak key generation during installation, problems with java library...
Keys generated with PGP5i batch mode do not contain sufficient randomness on systems that use /dev/random
Overview Under certain circumstances, PGP v5.0 generates keys that are not sufficiently random, which may allow an attacker to predict keys and, hence, recover information encrypted with that key. Description Generating Randomness in PGP Keys In order to generate cryptographically secure keys, PG...
CVE-2000-0445
The pgpk command in PGP 5.x on Unix systems uses an insufficiently random data source for non-interactive key pair generation, which may produce predictable keys...
Проблемы с libdes в NetBSD
Если отсутствует или не функционирует /dev/urandom, используется предсказуемая последовательность при генерации ключей...
Security Advisory 2000-007
-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2000-007 ================================= Topic: bad key generation in libdes if no /dev/urandom Version: Domestic US NetBSD-current between 19990624 and 20000622. No formal releases of NetBSD are vulnerable. Severity: high only if...
Проблема генерации ключей в PGP 5.0
При определенных условиях в Unix-версиях используется фиксированная последовательность вместо случайной при генерации ключа...
Key Generation Security Flaw in PGP 5.0
SECURITY FLAW IN PGP 5.0 ======================== EXECUTIVE SUMMARY ----------------- A flaw has been found in the randomness gathering code of PGP 5. PGP 5 will, under certain well-defined circumstances, generate public/private key pairs with no or only a small amount of randomness. Such keys ar...
alibaba.2.0.genkey.txt
Date: Fri, 21 May 1999 14:39:00 GMT From: [email protected] Chris Cowley Subject: Vulnerability in Windows SSL server and common browsers Some time ago, I downloaded a trial version of an SSL web server product for Windows NT called 'Alibaba 2.0' for evaluation as a possible SSL solution. I...