Skip to content
OpenAdvisories

Package · PyPI

pycrypto

4 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.5

    Pycrypto generates weak key parameters

    lib/Crypto/PublicKey/ElGamal.py in PyCrypto through 2.6.1 generates weak ElGamal key parameters, which allows attackers to obtain sensitive information by reading ciphertext data (i.e., it does not have semantic security in face of a ciphertext-only attack). …

  • High 7.5

    PyCrypto does not properly reseed PRNG before allowing access

    The Crypto.Random.atfork function in PyCrypto before 2.6.1 does not properly reseed the pseudo-random number generator (PRNG) before allowing a child process to access it, which makes it easier for context-dependent attackers to obtain sensitive information b…