559 matches found
python-ecdsa
Pure-Python ECDSA और ECDH यह ECC एलिप्टिक कर्व क्रिप्टोग्राफी का उपयोग करने में आसान कार्यान्वयन है, जिसमें ECDSA एलिप्टिक कर्व डिजिटल सिग्नेचर एल्गोरिथ्म, EdDSA एडवर्ड्स-कर्व डिजिटल सिग्नेचर एल्गोरिथ्म और ECDH एलिप्टिक कर्व डिफी-हेलमैन के लिए समर्थन है, जो विशुद्ध रूप से Python में लागू किया गया...
Ironsquirrel
IRONSQUIRREL Questo progetto mira a consegnare exploit del browser al browser della vittima in modo cifrato. Ellyptic-curve Diffie-Hellman secp256k1 è utilizzato per lo scambio di chiavi e AES per la crittografia. Consegnando il codice exploit e shellcode alla vittima in modo cifrato, l'attacco n...
CVE-2026-33936
CVE-2026-33936 Vulnerabilità Denial of Service in ecdsa PyPI Introduzione Ho identificato e divulgato in modo responsabile una vulnerabilità di gravità Moderata in python-ecdsa , una libreria Python di crittografia ampiamente utilizzata con 47,8M di download nell'ultimo mese. Ho trovato questo...
ECC_Attacks
Ataques Conhecidos à Criptografia de Curvas Elípticas Introdução Introdução às Curvas Elípticas Curvas Elípticas no Contexto da Criptografia Ataques ECC Ataques ECDH A Ordem do Gerador é Muito Pequena A Ordem do Gerador é um Número Suave A Ordem do Gerador é Quase um Número Suave, e a Chave Priva...
Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext
A flaw was found in Libgcrypt. A remote attacker could exploit this vulnerability by sending crafted Elliptic Curve Diffie-Hellman ECDH ciphertext to the gcrypkdecrypt function. This can lead to a heap-based buffer overflow, potentially causing a denial of service DoS condition...
Moderate: Red Hat Security Advisory: libgcrypt security update
An update for libgcrypt is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring...
Moderate: Red Hat Security Advisory: libgcrypt security update
An update for libgcrypt is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common...
Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext
A flaw was found in Libgcrypt. A remote attacker could exploit this vulnerability by sending crafted Elliptic Curve Diffie-Hellman ECDH ciphertext to the gcrypkdecrypt function. This can lead to a heap-based buffer overflow, potentially causing a denial of service DoS condition...
Moderate: Red Hat Security Advisory: libgcrypt security update
An update for libgcrypt is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common...
Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext
A flaw was found in Libgcrypt. A remote attacker could exploit this vulnerability by sending crafted Elliptic Curve Diffie-Hellman ECDH ciphertext to the gcrypkdecrypt function. This can lead to a heap-based buffer overflow, potentially causing a denial of service DoS condition...
CVE-2026-76234
libcrux-ecdh and libcrux-ed25519 before 0.0.6, and libcrux-psq before 0.0.7, contain cryptographic implementation bugs. libcrux-ecdh did not properly check length and clamping during X25519 secret validation and had a broken clamping check for imported X25519 secret keys; libcrux-ed25519 performe...
CVE-2026-76234 libcrux before 0.0.6 Cryptographic Implementation Bug Fixes
libcrux-ecdh and libcrux-ed25519 before 0.0.6, and libcrux-psq before 0.0.7, contain cryptographic implementation bugs. libcrux-ecdh did not properly check length and clamping during X25519 secret validation and had a broken clamping check for imported X25519 secret keys; libcrux-ed25519 performe...
CVE-2026-76234 libcrux before 0.0.6 Cryptographic Implementation Bug Fixes
libcrux-ecdh and libcrux-ed25519 before 0.0.6, and libcrux-psq before 0.0.7, contain cryptographic implementation bugs. libcrux-ecdh did not properly check length and clamping during X25519 secret validation and had a broken clamping check for imported X25519 secret keys; libcrux-ed25519 performe...
CVE-2026-76234
libcrux-ecdh (before 0.0.6) had broken X25519 length/clamping validation; libcrux-ed25519 (before 0.0.6) duplicated clamping during key generation; libcrux-psq (before 0.0.7) panicked instead of propagating AEADError. CVSS 3.1 scores availability impact HIGH (7.5) and CVSS 4.0 scores 8.7. No expl...
EUVD-2026-62475
libcrux-ecdh and libcrux-ed25519 before 0.0.6, and libcrux-psq before 0.0.7, contain cryptographic implementation bugs. libcrux-ecdh did not properly check length and clamping during X25519 secret validation and had a broken clamping check for imported X25519 secret keys; libcrux-ed25519 performe...
PT-2026-78416
Name of the Vulnerable Software and Affected Versions libcrux-ecdh versions prior to 0.0.6 libcrux-ed25519 versions prior to 0.0.6 libcrux-psq versions prior to 0.0.7 Description Cryptographic implementation bugs exist across multiple components. In libcrux-ecdh, length and clamping were not...
CVE-2026-72151
In the Linux kernel, the following vulnerability has been resolved: tpm: tpm2-sessions: wait for async KPP completion in tpmbufappendsalt tpmbufappendsalt in drivers/char/tpm/tpm2-sessions.c calls cryptokppgeneratepublickey and cryptokppcomputesharedsecret without installing a completion callback...
UBUNTU-CVE-2026-72151
In the Linux kernel, the following vulnerability has been resolved: tpm: tpm2-sessions: wait for async KPP completion in tpmbufappendsalt tpmbufappendsalt in drivers/char/tpm/tpm2-sessions.c calls cryptokppgeneratepublickey and cryptokppcomputesharedsecret without installing a completion callback...
CVE-2026-72151 tpm: tpm2-sessions: wait for async KPP completion in tpm_buf_append_salt
In the Linux kernel, the following vulnerability has been resolved: tpm: tpm2-sessions: wait for async KPP completion in tpmbufappendsalt tpmbufappendsalt in drivers/char/tpm/tpm2-sessions.c calls cryptokppgeneratepublickey and cryptokppcomputesharedsecret without installing a completion callback...
CVE-2026-72151
CVE-2026-72151 — Linux kernel : The tpm2-sessions path (tpm_buf_append_salt in drivers/char/tpm/tpm2-sessions.c) calls crypto_kpp_generate_public_key() and crypto_kpp_compute_shared_secret() without a completion callback, discards both return values, and immediately frees the kpp_request. For asy...