CVSROOT: /cvs
Module name: ports
Changes by: [email protected] 2026/07/06 06:56:50
Modified files:
security/p5-Crypt-DSA: Makefile distinfo
Log message:
update to p5-Crypt-DSA-1.22, fixes key generation issue with previous
versions:
"Crypt::DSA::Util::makerandom forces the high bit of every value it
returns to obtain an exactly N-bit integer for prime search. The
signing nonce and the private key are drawn from makerandom. Because
the high bit is always set, the result is not uniform: its top bit is
fixed, producing insecure values."
Keys used to sign with an affected version should be considered
compromised and new keys should be generated.
