Security
Security
PyCrypto generates weak ElGamal keys.
| Package | dev-python/pycrypto on all architectures |
|---|---|
| Affected versions | < 2.6 |
| Unaffected versions | >= 2.6 |
PyCrypto is the Python Cryptography Toolkit.
An error in the generate() function in ElGamal.py causes PyCrypto to generate weak ElGamal keys.
A remote attacker might be able to derive private keys.
There is no known workaround at this time.
All PyCrypto users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-python/pycrypto-2.6"
Release date
June 24, 2012
Latest revision
June 24, 2012: 1
Severity
normal
Exploitable
remote
Bugzilla entries