lib/Crypto/PublicKey/ElGamal.py in PyCrypto through 2.6.1 generates weak ElGamal key parameters, which allows attackers to obtain sensitive information by reading ciphertext data (i.e., it does not have semantic security in face of a ciphertext-only attack). The Decisional Diffie-Hellman (DDH) assumption does not hold for PyCryptos ElGamal implementation.
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Pycrypto | Dlitz | * | 2.6.1 (including) |
| Pycryptodome | Ubuntu | artful | * |
| Pycryptodome | Ubuntu | bionic | * |
| Pycryptodome | Ubuntu | devel | * |
| Python-crypto | Ubuntu | artful | * |
| Python-crypto | Ubuntu | bionic | * |
| Python-crypto | Ubuntu | devel | * |
| Python-crypto | Ubuntu | trusty | * |
| Python-crypto | Ubuntu | xenial | * |