CVE-2018-6594 | BDVDB-2026-96029 Detail

Description#

lib/Crypto/PublicKey/ElGamal.py in PyCrypto through 2.6.1 generates weak ElGamal key parameters, which allows attackers to obtain sensitive information by reading ciphertext data (i.e., it does not have semantic security in face of a ciphertext-only attack). The Decisional Diffie-Hellman (DDH) assumption does not hold for PyCrypto's ElGamal implementation.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12018-02-03Record published in the CVE List.
2. Version 22024-08-05Most recent update recorded in the CVE List.