PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces the signature space or public key space and makes it easier for attackers to conduct brute force attacks to obtain the private key.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Pycrypto | Dlitz | * | 2.5 (including) |
| Pycrypto | Dlitz | 1.0.0 (including) | 1.0.0 (including) |
| Pycrypto | Dlitz | 1.0.1 (including) | 1.0.1 (including) |
| Pycrypto | Dlitz | 1.0.2 (including) | 1.0.2 (including) |
| Pycrypto | Dlitz | 1.1-alpha2 (including) | 1.1-alpha2 (including) |
| Pycrypto | Dlitz | 1.9-alpha1 (including) | 1.9-alpha1 (including) |
| Pycrypto | Dlitz | 1.9-alpha2 (including) | 1.9-alpha2 (including) |
| Pycrypto | Dlitz | 1.9-alpha3 (including) | 1.9-alpha3 (including) |
| Pycrypto | Dlitz | 1.9-alpha4 (including) | 1.9-alpha4 (including) |
| Pycrypto | Dlitz | 1.9-alpha5 (including) | 1.9-alpha5 (including) |
| Pycrypto | Dlitz | 1.9-alpha6 (including) | 1.9-alpha6 (including) |
| Pycrypto | Dlitz | 2.0 (including) | 2.0 (including) |
| Pycrypto | Dlitz | 2.0.1 (including) | 2.0.1 (including) |
| Pycrypto | Dlitz | 2.1.0 (including) | 2.1.0 (including) |
| Pycrypto | Dlitz | 2.1.0-alpha1 (including) | 2.1.0-alpha1 (including) |
| Pycrypto | Dlitz | 2.1.0-alpha2 (including) | 2.1.0-alpha2 (including) |
| Pycrypto | Dlitz | 2.1.0-beta1 (including) | 2.1.0-beta1 (including) |
| Pycrypto | Dlitz | 2.2 (including) | 2.2 (including) |
| Pycrypto | Dlitz | 2.3 (including) | 2.3 (including) |
| Pycrypto | Dlitz | 2.4 (including) | 2.4 (including) |
| Pycrypto | Dlitz | 2.4.1 (including) | 2.4.1 (including) |