PyCrypto makes Use of Insufficiently Random Values
Moderate severity
GitHub Reviewed
Published
May 17, 2022
to the GitHub Advisory Database
•
Updated Apr 30, 2024
Description
Published by the National Vulnerability Database
Jun 17, 2012
Published to the GitHub Advisory Database
May 17, 2022
Reviewed
Apr 30, 2024
Last updated
Apr 30, 2024
PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces the signature space or public key space and makes it easier for attackers to conduct brute force attacks to obtain the private key.
References