Cache Side-Channel Attack

libgcrypt.so is vulnerable to cache side-channel attack. The attack is possible when an attacker can run arbitrary software on the hardware where the private RSA key is used...

Sensitive Information Leakage

libgcrypt.so is vulnerable to sensitive information leakage. The leakage persists because cipher/elgamal.c uses ElGamal encryption algorithm which has the ability of self re-randomization, and the support of key splitting to directly encrypt the messages...