Описание
Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery.
Crypt::DSA::sign caches the per-signature nonce material in the Key object without ever clearing it.
The first sign() on a Key object picks a nonce, and every later sign() on that same object reuses it, producing an identical "r".
Keys used to sign more than once with an affected version should be considered compromised.
A flaw was found in Crypt::DSA, a Perl module for Digital Signature Algorithm (DSA) cryptography. This vulnerability occurs because the software reuses a unique random number, known as a nonce, for multiple digital signatures generated with the same cryptographic key. An attacker could exploit this flaw to recover the private key, which would compromise the security of any data signed with that key.
Отчет
This is an Important flaw in the perl-Crypt-DSA module, allowing private key recovery due to nonce reuse across multiple digital signatures generated with the same key. An attacker could exploit this to compromise data signed with the affected key. This risk is present when applications repeatedly use the same Crypt::DSA key object for signing without proper nonce regeneration.
Меры по смягчению последствий
To mitigate this issue, ensure that a new Crypt::DSA Key object is instantiated for each digital signature operation. Reusing the same Key object for multiple signatures will lead to nonce reuse and potential private key recovery. If a service or application uses Crypt::DSA for signing, it should be restarted after implementing this change to ensure new key objects are used.
Дополнительная информация
Статус:
EPSS
7.1 High
CVSS3
Связанные уязвимости
Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery. Crypt::DSA::sign caches the per-signature nonce material in the Key object without ever clearing it. The first sign() on a Key object picks a nonce, and every later sign() on that same object reuses it, producing an identical "r". Keys used to sign more than once with an affected version should be considered compromised.
Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery. Crypt::DSA::sign caches the per-signature nonce material in the Key object without ever clearing it. The first sign() on a Key object picks a nonce, and every later sign() on that same object reuses it, producing an identical "r". Keys used to sign more than once with an affected version should be considered compromised.
Crypt::DSA versions before 1.21 for Perl reused the nonce across signa ...
Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery. Crypt::DSA::sign caches the per-signature nonce material in the Key object without ever clearing it. The first sign() on a Key object picks a nonce, and every later sign() on that same object reuses it, producing an identical "r". Keys used to sign more than once with an affected version should be considered compromised.
EPSS
7.1 High
CVSS3