cve/2003/CVE-2003-0971.md

CVE-2003-0971

Description

GnuPG (GPG) 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 (sign+encrypt) keys using the same key component for encryption as for signing, which allows attackers to determine the private key from a signature.

POC

Reference

No PoCs from references.

Github

• https://github.com/ADVAN-ELAA-8QM-PRC1/platform-external-wycheproof
• https://github.com/ARPSyndicate/cvemon
• https://github.com/C2SP/wycheproof
• https://github.com/DennissimOS/platform_external_wycheproof
• https://github.com/MIPS/external-wycheproof
• https://github.com/MrE-Fog/wycheproof
• https://github.com/MrE-Fog/wycheproof-2
• https://github.com/MrE-Fog/wycheproofz
• https://github.com/TinkerBoard-Android/external-wycheproof
• https://github.com/TinkerBoard-Android/rockchip-android-external-wycheproof
• https://github.com/TinkerBoard2-Android/external-wycheproof
• https://github.com/TinkerEdgeR-Android/external_wycheproof
• https://github.com/Ubiquiti-Android-FW/mtk-t0-mp5-aiot-V5.102-platform-external-wycheproof
• https://github.com/aosp-caf-upstream/platform_external_wycheproof
• https://github.com/ep-infosec/50_google_wycheproof
• https://github.com/google/wycheproof
• https://github.com/hannob/pgpbugs
• https://github.com/jquepi/wycheproof
• https://github.com/jquepi/wycheproof11
• https://github.com/khadas/android_external_wycheproof
• https://github.com/madhan1229/clone-prod
• https://github.com/msft-mirror-aosp/platform.external.wycheproof