Re: Fw: [Urgent] GnuPG ElGamal keys compromised

Ivan Boldyrev <[email protected]> Thu, 27 Nov 2003 13:24:21 +0600

Newsgroups	gmane.comp.security.pgp-n-gpg
Organization	this field is intentionally left blank
Message-ID	<[email protected]>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 8575 day of my life [email protected] wrote:
> While doing this change the problem with signing keys was accidently
> introduced: The same small k as for encryption was also used for
> signing.  This can be used for a cryptographic attack to reveal the
> private key (i.e the secret exponent x) if a signature done using
> that key is available.  This is always the case for primary ElGamal
> keys because signatures created with that key are used to bind the
> user ID and other material to the primary key.  Even is the key was
> never used for signing documents it should be considered
> compromised.

Вполне правдоподобно, да и подпись верна.

- -- 
Ivan Boldyrev

                      У женщины легче получить прощение, чем разрешение.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.3.3 (GNU/Linux)

iEYEARECAAYFAj/FpqgACgkQpb3RmFYJhnPV5wCeN6JdJ4ViC7b41VWWanppLxef
rC0AoK5BFdRynIzubkzI15NXzqtgBfHG
=iXbQ
-----END PGP SIGNATURE-----

------------------------ Yahoo! Groups Sponsor ---------------------~-->
Buy Ink Cartridges or Refill Kits for your HP, Epson, Canon or Lexmark
Printer at MyInks.com. Free s/h on orders $50 or more to the US & Canada.
http://www.c1tracking.com/l.asp?cid=5511
http://us.click.yahoo.com/mOAaAA/3exGAA/qnsNAA/MFQulB/TM
---------------------------------------------------------------------~->

----------------- COMMUNITY ADDRESSES -------------------------~->
Post message: [email protected] 
Moderators: [email protected]
News: news://news.gmane.org/gmane.comp.security.pgp-n-gpg
Off-Topic List: PGP-n-GPG-Off-Topic-subscribe-hHKSG33TihhbjbujkaE4pw@public.gmane.org
Unsubscribe:  [email protected]












 

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/