Security Advisories (2)
CVE-2020-17478 (2020-08-10)

ECDSA/EC/Point.pm in Crypt::Perl before 0.33 does not properly consider timing attacks against the EC point multiplication algorithm.

CVE-2020-13895 (2020-06-07)

Crypt::Perl::ECDSA in the Crypt::Perl (aka p5-Crypt-Perl) module before 0.32 for Perl fails to verify correct ECDSA signatures when r and s are small and when s = 1. This happens when using the curve secp256r1 (prime256v1). This could conceivably have a security-relevant impact if an attacker wishes to use public r and s values when guessing whether signature verification will fail.

Changes for version 0.1

  • PKCS #10 CSR generation (RSA or ECDSA)
  • Small optimizations to RSA generation and associated POD
  • ASN1 prepare() errors now include the template’s first 32 bytes

Documentation

Modules

Cryptography in Pure Perl
Elliptic curve cryptography in pure Perl
Interface to this module’s CurvesDB datastore
Parse RFC 3279 explicit curves
ECDSA key generation
ECDSA key parsing
object representation of ECDSA private key
object representation of ECDSA public key
Public-key cryptography logic
RSA in pure Perl (really!)
RSA key generation
PKCS1 v1.5 signature padding
RSA key parsing
object representation of an RSA private key
object representation of an RSA public key
Exception objects for Crypt::Perl

Provides

in lib/Crypt/Perl/ASN1.pm
in lib/Crypt/Perl/BigInt.pm
in lib/Crypt/Perl/ECDSA/EC/CurvesDB.pm
in lib/Crypt/Perl/ECDSA/EC/FieldElement.pm
in lib/Crypt/Perl/ECDSA/EC/Point.pm
in lib/Crypt/Perl/ECDSA/KeyBase.pm
in lib/Crypt/Perl/ECDSA/NIST.pm
in lib/Crypt/Perl/JWK.pm
in lib/Crypt/Perl/KeyBase.pm
in lib/Crypt/Perl/Math.pm
in lib/Crypt/Perl/PKCS8.pm
in lib/Crypt/Perl/RNG.pm
in lib/Crypt/Perl/RSA/KeyBase.pm
in lib/Crypt/Perl/RSA/Template.pm
in lib/Crypt/Perl/ToDER.pm
in lib/Crypt/Perl/X/ASN1/Decode.pm
in lib/Crypt/Perl/X/ASN1/Encode.pm
in lib/Crypt/Perl/X/ASN1/Find.pm
in lib/Crypt/Perl/X/ASN1/Prepare.pm
in lib/Crypt/Perl/X/Base.pm
in lib/Crypt/Perl/X/ECDSA/CharacteristicTwoUnsupported.pm
in lib/Crypt/Perl/X/ECDSA/NoCurveForNISTName.pm
in lib/Crypt/Perl/X/ECDSA/NoCurveForName.pm
in lib/Crypt/Perl/X/ECDSA/NoCurveForOID.pm
in lib/Crypt/Perl/X/ECDSA/NoCurveForParameters.pm
in lib/Crypt/Perl/X/InvalidJWK.pm
in lib/Crypt/Perl/X/TooLongToSign.pm
in lib/Crypt/Perl/X/UnknownHash.pm
in lib/Crypt/Perl/X/UnknownJWKkty.pm