EUVD-2018-18576

Malware in sbrugna...

Weak ElGamal Cryptography

Pycryptodome uses weak ElGamal cryptography. Due to an incorrect implementation of ElGamal, the Decisional Diffie-Hellman DDH assumption doesnt hold because of the way the key parameters are generated. This allows attackers who have access to the cipher-text to decrypt the messages and potentiall...

Weak ElGamal Parameters

PyCrypto uses weak ElGamal cryptography. Due to an incorrect implementation of ElGamal, the Decisional Diffie-Hellman DDH assumption doesn't hold because of the way the key parameters are generated. This allows attackers who have access to the cipher-text to decrypt the messages and potentially...