Design/Logic Flaw

Crypt::Perl::ECDSA in the Crypt::Perl aka p5-Crypt-Perl module before 0.32 for Perl fails to verify correct ECDSA signatures when r and s are small and when s = 1. This happens when using the curve secp256r1 prime256v1. This could conceivably have a security-relevant impact if an attacker wishes ...

CVE-2020-13895

CVE-2020-13895 affects Crypt::Perl::ECDSA in the Crypt::Perl (p5-Crypt-Perl) distribution for Perl, specifically before version 0.32. The issue is a verification bug where ECDSA signatures may fail to verify correctly when r and s are small and s = 1 on the secp256r1 (prime256v1) curve. The cited...