1. Ubuntu Security Notices
  2. USN-1484-1

USN-1484-1: PyCrypto vulnerability

Publication date

28 June 2012

Overview

PyCrypto improperly created ElGamal encryption keys.

Releases

Packages

  • python-crypto - cryptographic algorithms and protocols for Python

Details

It was discovered that PyCrypto produced inappropriate prime numbers when
generating ElGamal keys. An attacker could use this flaw to facilitate
brute-forcing of ElGamal encryption keys.

It was discovered that PyCrypto produced inappropriate prime numbers when
generating ElGamal keys. An attacker could use this flaw to facilitate
brute-forcing of ElGamal encryption keys.

Update instructions

In general, a standard system update will make all the necessary changes. If PyCrypto was used to generate ElGamal keys, we recommend they be regenerated.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release Package Version
12.04 precise python-crypto –  2.4.1-1ubuntu0.1
11.10 oneiric python-crypto –  2.3-2ubuntu0.1
11.04 natty python-crypto –  2.1.0-2ubuntu1.1
10.04 lucid python-crypto –  2.0.1+dfsg1-4ubuntu2.2

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

Have additional questions?

Talk to a member of the team ›