Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

cpan

Crypt-DSA

cpan

DSA Signatures and Key Generation

View on github.com · View on metacpan.org

Security Advisories for Crypt-DSA in cpan

19 days ago

Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery. "Crypt::DSA::Util::makerandom forces the high bit of every value it returns to obtain an exactly N-bit... CPANSA-Crypt-DSA-2026-14570

cpan Crypt-DSA
about 1 month ago

Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery. Crypt::DSA::sign caches the per-signature nonce material in the Key object without ever clearing it. The first sign() on a Key object picks ... CPANSA-Crypt-DSA-2026-12205

cpan Crypt-DSA
2 months ago

Crypt::DSA versions before 1.20 for Perl generate seeds using rand. Seeds were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage. CPANSA-Crypt-DSA-2026-8700

cpan Crypt-DSA
2 months ago

Crypt::DSA versions through 1.19 for Perl use 2-args open, allowing existing files to be modified. CPANSA-Crypt-DSA-2026-8704

cpan Crypt-DSA
almost 15 years ago

The Crypt::DSA (aka Crypt-DSA) module 1.17 and earlier for Perl, when /dev/random is absent, uses the Data::Random module, which makes it easier for remote attackers to spoof a signature, or determine the signing key of a signed message, via a brute-fo... CPANSA-Crypt-DSA-2011-3599

cpan Crypt-DSA

Filter by Severity