400 matches found
PGP-client-checker-CVE-2021-33560
PGP 客户端检查工具 – CVE-2021-33560 这是一个用于检查您的 OpenPGP 客户端是否受 CVE-2021-33560 影响的工具。 该漏洞使您加密到某些 ElGamal 子密钥的消息面临明文恢复风险。漏洞的技术细节见这篇博客文章和这篇研究论文。 此工具用于测试您的 OpenPGP 客户端在作为发送方 时是否受影响。它无法判断 您的 ElGamal 子密钥在作为接收方 时是否受影响；遗憾的是，这是一种计算量很大的检查，只能由专家执行。如果您使用 ElGamal 子密钥并担心其安全性，请阅读我们的常见问题解答。 要求 您需要 Python 3.8 或更高版本。 使用方法...
Astra Linux – Vulnerability in libgcrypt20
The ElGamal implementation in Libgcrypt before version 1.9.4 allows plaintext recovery. This occurs because, during interaction between two cryptographic libraries, a dangerous combination of elements arises—specifically, the prime number defined by the receiver’s public key, the generator define...
Ternary Public-Key Cryptosystem
Public-key cryptosystems eliminate the requirement for pre-shared secret keys by enabling encryption with a publicly disclosed key and decryption with a corresponding private key. In this article we generalize the public-key cryptosystems to ternary algebraic structures, with particular attention...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: libgcrypt (UTSA-2026-017437)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017437 advisory. The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: libgcrypt (UTSA-2026-017573)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017573 advisory. Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpipowm, and...
JLSEC-2026-124
The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by the receiver's public key, and the sender's...
JLSEC-2026-123
Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpipowm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP...
Beyond the Finite Variant Property: Extending Symbolic Diffie-Hellman Group Models (Extended Version)
Diffie-Hellman groups are commonly used in cryptographic protocols. While most state-of-the-art, symbolic protocol verifiers support them to some degree, they do not support all mathematical operations possible in these groups. In particular, they lack support for exponent addition, as these tool...
Libgcrypt 1.12.0
Libgcrypt is a general-purpose cryptographic library based on the code from GnuPG. It provides functions for all cryptographic building blocks: symmetric ciphers AES, DES, Blowfish, CAST5, Twofish, and Arcfour, hash algorithms MD4, MD5, RIPE-MD160, SHA-1, and TIGER-192, MACs HMAC for all hash...
MiracleLinux 8 : libgcrypt-1.8.5-6.el8 (AXSA:2021-2604:02)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2604:02 advisory. libgcrypt: mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpipowm CVE-2021-33560 Tenable has...
MiracleLinux 8 : libgcrypt-1.8.5-7.el8 (AXSA:2022-3676:01)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3676:01 advisory. libgcrypt: ElGamal implementation allows plaintext recovery CVE-2021-40528 Tenable has extracted the preceding description block directly from the MiracleLin...
Siemens SIMATIC S7-1500 Observable Discrepancy (CVE-2021-33560)
Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side- channel attack against mpipowm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP. This plugin only works with...
EUVD-2014-3565
Malware in sbrugna...
EUVD-2021-20252
Malware in sbrugna...
EUVD-2018-18576
Malware in sbrugna...
EUVD-2018-0119
Malware in sbrugna...
EUVD-2012-0026
Malware in sbrugna...
EUVD-2021-27705
Malicious code in bioql PyPI...