---

CVE-2017-7526 - log back

CVE-2017-7526 created at 25 Sep 2019 19:31:40
Severity	+ High
Remote	+ Local
Type	+ Private key recovery
Description	+ The pattern of squarings and multiplications in left-to-right sliding windows in libgcrypt <= 1.7.7 leaks significant information about exponent bits, allowing for the very efficient recovery of a full 1024-bit RSA key.
References	+ https://eprint.iacr.org/2017/627 + https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git;a=commitdiff;h=a9f612def801c8145d551d995475e5d51a4c988c;hp=0e6788517eac6f508fa32ec5d5c1cada7fb980bc
Notes