CVE-2026-14570

CVE-2026-14570 affects Crypt::DSA for Perl prior to 1.22. The root cause is a biased random generator in Crypt::DSA::Util::makerandom that fixes the top bit of the produced N-bit values, making signing nonces non-uniform and enabling private-key recovery. An attacker collecting a modest number of...