Changes for version 1.21 - 2026-06-14

  • This module is now makred as deprecated. Crypt-DSA-GMP is a possible replacement.
  • Fixed CVE-2026-12205 key material reuse for multiple signing events
  • SECURITY (CWE-323): sign() reused the DSA nonce k across signatures (r and k^-1 were cached on the key and not regenerated), allowing private-key recovery from two signatures over different messages. Now generates a fresh nonce per signature. Keys used to sign more than once with an affected version should be considered compromised.

Documentation

Modules

DSA Signatures and Key Generation
DSA key
Read/write DSA PEM files
Read/write DSA SSH2 files
DSA key generation system
DSA signature object
DSA Utility functions

Provides

in lib/Crypt/DSA/Key/SSH2.pm