5
CVSSv2

CVE-2003-0971

Published: 15/12/2003 Updated: 11/10/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 449
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

GnuPG (GPG) 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 (sign+encrypt) keys using the same key component for encryption as for signing, which allows malicious users to determine the private key from a signature.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

gnu privacy guard 1.0.2

gnu privacy guard 1.2.1

gnu privacy guard 1.2.2

gnu privacy guard 1.0.7

gnu privacy guard 1.2

gnu privacy guard 1.0.3

gnu privacy guard 1.0.3b

gnu privacy guard 1.2.3

gnu privacy guard 1.0.4

gnu privacy guard 1.0.5

gnu privacy guard 1.0.6

Vendor Advisories

Phong Nguyen identified a severe bug in the way GnuPG creates and uses ElGamal keys for signing This is a significant security failure which can lead to a compromise of almost all ElGamal keys used for signing This update disables the use of this type of key For the current stable distribution (woody) this problem has been fixed in version 106 ...

Github Repositories

Project Wycheproof githubcom/google/wycheproof Project Wycheproof is named after Mount Wycheproof, the smallest mountain in the world The main motivation for the project is to have a goal that is achievable The smaller the mountain the more likely it is to be able to climb it [TOC] Introduction Project Wycheproof tests crypto libraries against known attacks It is d

Project Wycheproof githubcom/google/wycheproof Project Wycheproof is named after Mount Wycheproof, the smallest mountain in the world The main motivation for the project is to have a goal that is achievable The smaller the mountain the more likely it is to be able to climb it [TOC] Introduction Project Wycheproof tests crypto libraries against known attacks It is d

Project Wycheproof githubcom/google/wycheproof Project Wycheproof is named after Mount Wycheproof, the smallest mountain in the world The main motivation for the project is to have a goal that is achievable The smaller the mountain the more likely it is to be able to climb it [TOC] Introduction Project Wycheproof tests crypto libraries against known attacks It is d

Project Wycheproof githubcom/google/wycheproof Project Wycheproof is named after Mount Wycheproof, the smallest mountain in the world The main motivation for the project is to have a goal that is achievable The smaller the mountain the more likely it is to be able to climb it [TOC] Introduction Project Wycheproof tests crypto libraries against known attacks It is d

Project Wycheproof githubcom/google/wycheproof Project Wycheproof is named after Mount Wycheproof, the smallest mountain in the world The main motivation for the project is to have a goal that is achievable The smaller the mountain the more likely it is to be able to climb it [TOC] Introduction Project Wycheproof tests crypto libraries against known attacks It is d

Project Wycheproof githubcom/google/wycheproof Project Wycheproof is named after Mount Wycheproof, the smallest mountain in the world The main motivation for the project is to have a goal that is achievable The smaller the mountain the more likely it is to be able to climb it [TOC] Introduction Project Wycheproof tests crypto libraries against known attacks It is d

Project Wycheproof githubcom/google/wycheproof Project Wycheproof is named after Mount Wycheproof, the smallest mountain in the world The main motivation for the project is to have a goal that is achievable The smaller the mountain the more likely it is to be able to climb it [TOC] Introduction Project Wycheproof tests crypto libraries against known attacks It is d

Project Wycheproof tests crypto libraries against known attacks.

Project Wycheproof githubcom/google/wycheproof Project Wycheproof is named after Mount Wycheproof, the smallest mountain in the world The main motivation for the project is to have a goal that is achievable The smaller the mountain the more likely it is to be able to climb it [TOC] Introduction Project Wycheproof tests crypto libraries against known attacks It is d

Project Wycheproof githubcom/google/wycheproof Project Wycheproof is named after Mount Wycheproof, the smallest mountain in the world The main motivation for the project is to have a goal that is achievable The smaller the mountain the more likely it is to be able to climb it [TOC] Introduction Project Wycheproof tests crypto libraries against known attacks It is d

Project Wycheproof githubcom/google/wycheproof Project Wycheproof is named after Mount Wycheproof, the smallest mountain in the world The main motivation for the project is to have a goal that is achievable The smaller the mountain the more likely it is to be able to climb it [TOC] Introduction Project Wycheproof tests crypto libraries against known attacks It is d

Project Wycheproof githubcom/google/wycheproof Project Wycheproof is named after Mount Wycheproof, the smallest mountain in the world The main motivation for the project is to have a goal that is achievable The smaller the mountain the more likely it is to be able to climb it [TOC] Introduction Project Wycheproof tests crypto libraries against known attacks It is d

Project Wycheproof githubcom/google/wycheproof Project Wycheproof is named after Mount Wycheproof, the smallest mountain in the world The main motivation for the project is to have a goal that is achievable The smaller the mountain the more likely it is to be able to climb it [TOC] Introduction Project Wycheproof tests crypto libraries against known attacks It is d

Project Wycheproof githubcom/google/wycheproof Project Wycheproof is named after Mount Wycheproof, the smallest mountain in the world The main motivation for the project is to have a goal that is achievable The smaller the mountain the more likely it is to be able to climb it [TOC] Introduction Project Wycheproof tests crypto libraries against known attacks It is d

Project Wycheproof tests crypto libraries against known attacks.

Project Wycheproof githubcom/google/wycheproof Project Wycheproof is named after Mount Wycheproof, the smallest mountain in the world The main motivation for the project is to have a goal that is achievable The smaller the mountain the more likely it is to be able to climb it NoteHello RWC 2024 attendees and others! Wycheproof recently moved to community maintenance