Description
A "mathematical flaw" in the implementation of the El Gamal signature algorithm for LibTomCrypt 1.0 to 1.0.2 allows attackers to generate valid signatures without having the private key.
References
- libtomcrypt-signature-security-bypass(20455) vdb-entry
- http://www.securiteam.com/unixfocus/5JP092AFPG.html
- 16188 vdb-entry
- 13473 vdb-entry
- 15233 third-party-advisory
- 20050503 Secure Science Corporation Advisory CSA-056 mailing-list