[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244625

 
 

909

 
 

193379

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

DSA-3649-1 gnupg -- gnupg

ID: oval:org.secpod.oval:def:602593Date: (C)2016-08-23   (M)2023-12-20
Class: PATCHFamily: unix




Felix Doerre and Vladimir Klebanov from the Karlsruhe Institute of Technology discovered a flaw in the mixing functions of GnuPG"s random number generator. An attacker who obtains 4640 bits from the RNG can trivially predict the next 160 bits of output. A first analysis on the impact of this bug for GnuPG shows that existing RSA keys are not weakened. For DSA and Elgamal keys it is also unlikely that the private key can be predicted from other public information.

Platform:
Debian 8.x
Product:
gnupg
Reference:
DSA-3649-1
CVE-2016-6313
CVE    1
CVE-2016-6313
CPE    2
cpe:/o:debian:debian_linux:8.x
cpe:/a:gnupg:gnupg

© SecPod Technologies