/ 
Crypt-DSA-0.10
River stage one • 2 direct dependents • 6 total dependents
Security Advisories (1)
CVE-2011-3599 (2011-10-10)

The Crypt::DSA (aka Crypt-DSA) module 1.17 and earlier for Perl, when /dev/random is absent, uses the Data::Random module, which makes it easier for remote attackers to spoof a signature, or determine the signing key of a signed message, via a brute-force attack.

Changes for version 0.10

  • Added much better test suite: tests bigint utilities in Util, sign/verify, key generation (512, 768, 1024 bits), PEM encoding/decoding (if Convert::PEM is installed), FIPS 186-2 example case.
  • Added interface to Convert::PEM to read/write encrypted PEM files containing ASN.1-encoded DSA keys. Convert::PEM is optional; Makefile.PL will check for it and warn if it can't be found.
  • Get/set accessors now take hex values and store their values internally as strings. Thanks to Crypt::RSA for the idea. :)

Modules

Crypt::DSA
DSA Signatures and Key Generation
Crypt::DSA::Key
DSA key
Crypt::DSA::Key::PEM
Read/write DSA PEM files
Crypt::DSA::KeyChain
DSA key generation system
Crypt::DSA::Signature
DSA signature object
Crypt::DSA::Util
DSA Utility functions

Other files