cryptovenom

CryptoVenom CryptoVenom: The Cryptography Swiss Army knife What is CryptoVenom? CryptoVenom is an OpenSource tool which contains a lot of cryptosystems and cryptoanalysis methods all in one, including classical algorithms, hash algorithms, encoding algorithms, logic gates, mathematical functions,...

wolfCOSE

wolfCOSE wolfCOSE is a lightweight C library implementing CBOR RFC 8949, COSE RFC 9052/9053, and post-quantum ML-DSA for COSE RFC 9964 using wolfSSL as the crypto backend. Main Features Complete RFC 9052 message set : all six COSE message types, including multi-signer COSESign and multi-recipient...

dsa

A Summary of Go's crypto/dsa Vulnerability CVE-2016-3959 Alex Mullins April 9, 2016 Introduction Recently, there was a bug discovered in the Digital Signature Algorithm DSA crypto library for the Go programming language. In this article we'll go over the details of the bug and how an attacker cou...

punk.py

punk.py unix SSH post-exploitation 1337 tool how it works punk.py is a post-exploitation tool meant to help network pivoting from a compromised unix box. It collect usernames, ssh keys and known hosts from a unix system, then it tries to connect via ssh to all the combinations found. punk.py is...

ejbca-pqc-lab

EJBCA Pure PQC Lab — ML-DSA-65 Two-Tier PKI Hierarchy A hands-on implementation of NIST FIPS 204 ML-DSA in a two-tier PKI hierarchy using EJBCA Community Edition. 📖 Full walkthrough: Building a Post-Quantum PKI: How I Signed a Root CA and Sub CA Using ML-DSA on EJBCA What This Lab Builds A comple...

SUSE CVE-2026-97614

In the Linux kernel, the following vulnerability has been resolved: net: dsa: tagbrcm: legacy FCS: request needed tailroom The legacy FCS tagger calculates the CRC over skb-len bytes starting at skb-data. When a nonlinear skb reaches the tagger, this reads past the linear head into unrelated slab...

thunderbird security update

140.16.0-1 - Add Oracle prefs file 140.16.0-1 - Update to 140.16.0 ESR 140.15.0-1 - Update to 140.15.0 ESR - Fix ML-DSA certificate validation Resolves: RHEL-252227...

AlmaLinux 9.6 [TuxCare] Security Update: buildah / buildah-tests Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1782812169)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782812169 advisory. - Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large...

AlmaLinux 9.2 [TuxCare] Security Update: buildah / buildah-tests (ALMALINUX9.2:CLSA-2026:1782810335)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1782810335 advisory. - The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or...

CLEANSTART-2026-BW04566 RSA and DSA public key parsers did not enforce size limits on key parameters

Security vulnerability affects the containerd package. The RSA and DSA public key parsers did not enforce size limits on key parameters...

CVE-2026-97614

A flaw was found in the Linux kernel's Distributed Switch Architecture DSA Broadcom tagger. The legacy Frame Check Sequence FCS tag handler failed to declare the required buffer tailroom, allowing non-linear network packet buffers to reach the checksum calculation routine. A local user could...

LR-WebPKI

LR+ WebPKI 评估工件 本包包含最终版 LR+ 参考实现、生产重建包装器、测试以及针对 WebPKI CA 上下文中的上下文封闭后量子认证生成的评估输出。 该包有意作为提交工件而非研究日志快照编写：目标名称、文件名、模块名称和报告均使用稳定的实现术语。 内容 src/lrplus/ LR+ 参考模块 scripts/ 语料库下载、构建、重建、评估和检查 config/ 固定的重建和下载配置 results/ 论文使用的生成生产输出 audit/ 来源报告和输出哈希清单 backups/ 重建前输入语料库备份的清单 data/ccadbfull/ CCADB 下载清单和文件哈希...

thunderbird security update

140.16.0-1.0.1 - Add Oracle prefs 140.16.0-1 - Update to 140.16.0 ESR 140.15.0-1 - Update to 140.15.0 ESR - Fix ML-DSA certificate validation Resolves: RHEL-252227...

ecdsa-private-key-recovery

ecdsa-key-recovery 执行ECDSA和DSA nonce重用私钥恢复攻击 一个用于分析签名漏洞的密码学研究工具 让我们恢复两个共享相同 nonce k 的签名所对应的私钥。请注意，选择相同的 nonce k 会导致两个签名具有相同的签名值 r。要找到ECDSA nonce重用的良好候选者，请检查在不同消息（或哈希）上共享相同 r、pubkey 和 curve 的签名。例如，基于 bitcoind 的区块链项目通常是ECDSA签名材料的良好来源。 sampleA r , sA, hashA , pubkey, curve sampleB r , sB, hashB ,...

ecdsa-private-key-recovery

ecdsa-key-recovery 执行ECDSA和DSA随机数重用私钥恢复攻击 一个用于分析签名漏洞的密码学研究工具 让我们恢复两个共享相同 nonce k 的签名所对应的私钥。请注意，选择相同的 nonce k 会导致两个签名具有相同的签名值 r。要找到ECDSA随机数重用的良好候选者，请检查在 curve 上具有相同 r、pubkey 但针对不同消息（或哈希）的签名。例如，基于 bitcoind 的区块链项目通常是ECDSA签名材料的良好来源。 sampleA r , sA, hashA , pubkey, curve sampleB r , sB, hashB , pubkey...

[SECURITY] [DSA 6513-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6513-1 [email protected] https://www.debian.org/security/ Andres Salomon September 25, 2026 https://www.debian.org/security/faq -...

DEBIAN-CVE-2026-98030

In the Linux kernel, the following vulnerability has been resolved: net: dsa: bcmsf2: bound the CFP rule dump by the caller's buffer size bcmsf2cfprulegetall walks the whole cfp.unique bitmap into rulelocs without consulting nfc-rulecnt, which is how many entries the caller had room for...

CVE-2026-98030

In the Linux kernel, the following vulnerability has been resolved: net: dsa: bcmsf2: bound the CFP rule dump by the caller's buffer size bcmsf2cfprulegetall walks the whole cfp.unique bitmap into rulelocs without consulting nfc-rulecnt, which is how many entries the caller had room for...

DEBIAN-CVE-2026-98027

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size mv88e6xxxgetrxnfc uses rxnfc-rulecnt as the write index while dumping the policy IDR, clobbering the input value before it has been looked at. That input...

DEBIAN-CVE-2026-97614

In the Linux kernel, the following vulnerability has been resolved: net: dsa: tagbrcm: legacy FCS: request needed tailroom The legacy FCS tagger calculates the CRC over skb-len bytes starting at skb-data. When a nonlinear skb reaches the tagger, this reads past the linear head into unrelated slab...