Executive Summary

This vulnerability affects Crypt::DSA versions before 1.21 for Perl, where the nonce used in digital signatures is reused across multiple signatures.

Specifically, the Crypt::DSA::sign function caches the nonce material in the Key object and does not clear it, causing the same nonce to be reused for every signature made with that Key object.

Reusing the nonce results in identical 'r' values in signatures, which can lead to the recovery of the private key.

Useful 0 Not Useful 0

Impact Analysis

If you use an affected version of Crypt::DSA to sign data multiple times with the same Key object, the private key can be recovered by an attacker due to nonce reuse.

This compromises the security of your cryptographic signatures, potentially allowing attackers to forge signatures or impersonate you.

Keys used to sign more than once with an affected version should be considered compromised.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, you should consider any keys used to sign more than once with Crypt::DSA versions before 1.21 as compromised.

Update Crypt::DSA to version 1.21 or later where the nonce reuse issue is fixed.

Revoke and replace any compromised keys that were used with the affected versions.

Useful 0 Not Useful 0