195 matches found
purrcrypt
🐱 PurrCrypt 🐶 무시무시하게 안전하고, 귀여움 가득! 비밀을 영원히 안전하게 지켜주는 완벽한 방법, 컴퓨터에서 바로 야옹 소리와 함께 친구들의 발 까지! !IMPORTANT PurrCrypt는 털 복숭이 disguise 속의 진짜 암호학입니다! 여러분의 메시지는 비트코인에서 사용하는 것과 동일한 타원 곡선 알고리즘으로 보호되며, 단지 귀여운 고양이와 강아지 소리로 포장되어 있을 뿐입니다. 귀여움은 결코 보안을 희생해서는 안 됩니다! 이 털복숭이는 뭘까요? 🐾 PurrCrypt는 아주 진지한 암호학자가 48시간 연속으로...
ECC_Attacks
楕円曲線暗号に対する既知の攻撃 はじめに 楕円曲線入門 暗号の文脈における楕円曲線 ECC攻撃 ECDH攻撃 生成元の位数が小さすぎる 生成元の位数がスムーズ数である 生成元の位数がほぼスムーズ数であり、秘密鍵が小さい 点が曲線上にあることを検証していない 曲線が特異である 曲線が超特異である 曲線が異常である ECDSA攻撃 メッセージに署名する前にハッシュ化していない 異なる署名で同じkの値を再利用する kの値を安全でない方法で生成する 生成元が有効であることを検証していない 結論 ECDH攻撃の概要 ECDSA攻撃の概要 これらの攻撃への対策 参考文献 はじめに...
SUSE CVE-2026-64313
In the Linux kernel, the following vulnerability has been resolved: crypto: ecc - Fix carry overflow in vli multiplication The carry flag calculation fails when r01.mhigh is saturated 0xFFFFFFFFFFFFFFFF and addition of lower bits overflows. The condition r01.mhigh product.mhigh doesn't handle the...
CVE-2026-64313
In the Linux kernel, the following vulnerability has been resolved: crypto: ecc - Fix carry overflow in vli multiplication The carry flag calculation fails when r01.mhigh is saturated 0xFFFFFFFFFFFFFFFF and addition of lower bits overflows. The condition r01.mhigh product.mhigh doesn't handle the...
CVE-2026-64313 crypto: ecc - Fix carry overflow in vli multiplication
In the Linux kernel, the following vulnerability has been resolved: crypto: ecc - Fix carry overflow in vli multiplication The carry flag calculation fails when r01.mhigh is saturated 0xFFFFFFFFFFFFFFFF and addition of lower bits overflows. The condition r01.mhigh product.mhigh doesn't handle the...
CVE-2026-64313 crypto: ecc - Fix carry overflow in vli multiplication
In the Linux kernel, the following vulnerability has been resolved: crypto: ecc - Fix carry overflow in vli multiplication The carry flag calculation fails when r01.mhigh is saturated 0xFFFFFFFFFFFFFFFF and addition of lower bits overflows. The condition r01.mhigh product.mhigh doesn't handle the...
PT-2026-64534
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the crypto: ecc component where a carry overflow occurs during vli multiplication. The carry flag calculation fails when r01.m high is saturated and the addition of...
CVE-2026-45328 ESF-IDF: Out-of-Bounds Write in ESP-TEE Secure Service Wrappers
ESF-IDF is the Espressif Internet of Things IOT Development Framework. In versions 5.5.4 and 6.0, the esptee component exposes secure-service wrappers in espsecureservices.c and espsecureservicesiram.c that bridge calls from the user application i.e. the REE to TEE-protected hardware peripherals...
CVE-2026-45328 ESF-IDF: Out-of-Bounds Write in ESP-TEE Secure Service Wrappers
ESF-IDF is the Espressif Internet of Things IOT Development Framework. In versions 5.5.4 and 6.0, the esptee component exposes secure-service wrappers in espsecureservices.c and espsecureservicesiram.c that bridge calls from the user application i.e. the REE to TEE-protected hardware peripherals...
EulerOS 2.0 SP13 : python-ecdsa (EulerOS-SA-2026-2352)
According to the versions of the python-ecdsa packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The ecdsa PyPI package is a pure Python implementation of ECC Elliptic Curve Cryptography with support for ECDSA Elliptic Curve Digital...
JLSEC-2026-254 Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted explicit values for...
Issue summary: Use of the low-level GF2^m elliptic curve APIs with untrusted explicit values for the field polynomial can lead to out-of-bounds memory reads or writes. Impact summary: Out of bound memory writes can lead to an application crash or even a possibility of a remote code execution,...
CVE-2026-41989
Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcrypkdecrypt...
Securing Elliptic Curve Cryptocurrencies against Quantum Vulnerabilities: Resource Estimates and Mitigations
This whitepaper seeks to elucidate implications that the capabilities of developing quantum architectures have on blockchain vulnerabilities and mitigation strategies. First, we provide new resource estimates for breaking the 256-bit Elliptic Curve Discrete Logarithm Problem, the core of modern...
Linux Distros Unpatched Vulnerability : CVE-2026-33936
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ecdsa PyPI package is a pure Python implementation of ECC Elliptic Curve Cryptography with support for ECDSA Elliptic Curve Digital Signature Algorithm, EdD...
UBUNTU-CVE-2026-33936
The ecdsa PyPI package is a pure Python implementation of ECC Elliptic Curve Cryptography with support for ECDSA Elliptic Curve Digital Signature Algorithm, EdDSA Edwards-curve Digital Signature Algorithm and ECDH Elliptic Curve Diffie-Hellman. Prior to version 0.19.2, an issue in the low-level D...
Pure-Python ECDSA and ECDH 安全漏洞
Pure-Python ECDSA and ECDH is a pure Python implementation of elliptic curve cryptography library open-sourced by tlsfuzzer. Versions of Pure-Python ECDSA and ECDH prior to 0.19.2 have security vulnerabilities. These vulnerabilities stem from low-level DER parsing functions, which may cause...
EUVD-2026-13172
In wolfSSL 5.8.4, constant-time masking logic in sp256getentry2569 is optimized into conditional branches bnez by GCC when targeting RISC-V RV32I with -O3. This transformation breaks the side-channel resistance of ECC scalar multiplication, potentially allowing a local attacker to recover secret...
SUSE-SU-2026:0434-1 Security update for gpg2
This update for gpg2 fixes the following issues: Security fixes: - CVE-2026-24882: Fixed stack-based buffer overflow in TPM2 PKDECRYPT for TPM-backed RSA and ECC keys bsc1257396 - Fixed GnuPG accepting Path Separators and Path Traversals in Literal Data 'Filename' Field bsc1256389...
