Security Advisories (1)
CVE-2011-3599 (2011-10-10)

The Crypt::DSA (aka Crypt-DSA) module 1.17 and earlier for Perl, when /dev/random is absent, uses the Data::Random module, which makes it easier for remote attackers to spoof a signature, or determine the signing key of a signed message, via a brute-force attack.

NAME

Crypt::DSA::Signature - DSA signature object

SYNOPSIS

use Crypt::DSA::Signature;
my $sig = Crypt::DSA::Signature->new;

$sig->r($r);
$sig->s($s);

DESCRIPTION

AUTHOR & COPYRIGHTS

Please see the Crypt::DSA manpage for author, copyright, and license information.