DSA-3185-1 libgcrypt11 -- libgcrypt11ID: oval:org.secpod.oval:def:601988 | Date: (C)2015-03-20 (M)2023-12-07 |
Class: PATCH | Family: unix |
Multiple vulnerabilities were discovered in libgcrypt: CVE-2014-3591 The Elgamal decryption routine was susceptible to a side-channel attack discovered by researchers of Tel Aviv University. Ciphertext blinding was enabled to counteract it. Note that this may have a quite noticeable impact on Elgamal decryption performance. CVE-2015-0837 The modular exponentiation routine mpi_powm was susceptible to a side-channel attack caused by data-dependent timing variations when accessing its internal pre-computed table.