PaulHowarth/Blog/2018-02-23

Friday 23rd February 2018

Fedora Project

• Updated python-crypto (2.6.1) in F-26, F-27, F-28 and Rawhide to address CVE-2018-6594 (Bug #1542313): When creating ElGamal keys, the generator wasn't a square residue - ElGamal encryption done with those keys cannot be secure under the DDH assumption

• More details:

  • https://github.com/TElgamal/attack-on-pycrypto-elgamal

  • https://github.com/Legrandin/pycryptodome/issues/90

  • https://github.com/dlitz/pycrypto/issues/253

Local Packages

• Updated python-crypto (2.6.1) as per the Fedora version