https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 23:40:02 +0000 https://vulnerability.circl.lu/vuln/cve-2026-14570 <p><strong>Affected:</strong> TIMLEGGE Crypt::DSA</p> <p>Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery.</p> <p>&#34;Crypt::DSA::Util::makerandom forces the high bit of every value it returns to obtain an exactly N-bit integer for prime search. The signing nonce and the private key are drawn from makerandom. Because the high bit is always set, the result is not uniform: its top bit is fixed, producing insecure values.&#34;</p> <p>An attacker who collects a modest number of signatures under an affected key, together with the public key, can recover the private key with a lattice attack.</p> <p>Keys used to sign with an affected version should be considered compromised and new keys should be generated.</p> <p><strong>Affected:</strong> TIMLEGGE Crypt::DSA</p> <p>Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery.</p> <p>&#34;Crypt::DSA::Util::makerandom forces the high bit of every value it returns to obtain an exactly N-bit integer for prime search. The signing nonce and the private key are drawn from makerandom. Because the high bit is always set, the result is not uniform: its top bit is fixed, producing insecure values.&#34;</p> <p>An attacker who collects a modest number of signatures under an affected key, together with the public key, can recover the private key with a lattice attack.</p> <p>Keys used to sign with an affected version should be considered compromised and new keys should be generated.</p> https://vulnerability.circl.lu/vuln/cve-2026-14570