cve/2003/CVE-2003-0971.md

### [CVE-2003-0971](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0971)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

GnuPG (GPG) 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 (sign+encrypt) keys using the same key component for encryption as for signing, which allows attackers to determine the private key from a signature.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/ADVAN-ELAA-8QM-PRC1/platform-external-wycheproof
- https://github.com/ARPSyndicate/cvemon
- https://github.com/C2SP/wycheproof
- https://github.com/DennissimOS/platform_external_wycheproof
- https://github.com/MIPS/external-wycheproof
- https://github.com/MrE-Fog/wycheproof
- https://github.com/MrE-Fog/wycheproof-2
- https://github.com/MrE-Fog/wycheproofz
- https://github.com/TinkerBoard-Android/external-wycheproof
- https://github.com/TinkerBoard-Android/rockchip-android-external-wycheproof
- https://github.com/TinkerBoard2-Android/external-wycheproof
- https://github.com/TinkerEdgeR-Android/external_wycheproof
- https://github.com/Ubiquiti-Android-FW/mtk-t0-mp5-aiot-V5.102-platform-external-wycheproof
- https://github.com/aosp-caf-upstream/platform_external_wycheproof
- https://github.com/ep-infosec/50_google_wycheproof
- https://github.com/google/wycheproof
- https://github.com/hannob/pgpbugs
- https://github.com/jquepi/wycheproof
- https://github.com/jquepi/wycheproof11
- https://github.com/khadas/android_external_wycheproof
- https://github.com/madhan1229/clone-prod
- https://github.com/msft-mirror-aosp/platform.external.wycheproof