tlsfuzzer / python-ecdsa

pure-python ECDSA signature/verification and ECDH key agreement
Other
911 stars 311 forks source link

Need fix for CVE-2024-23342 which is related to ecdsa #342

Closed shripad-bhat closed 1 month ago

shripad-bhat commented 1 month ago

The ecdsa PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature Algorithm), EdDSA (Edwards-curve Digital Signature Algorithm) and ECDH (Elliptic Curve Diffie-Hellman). Versions 0.18.0 and prior are vulnerable to the Minerva attack. As of time of publication, no known patched version exists.

tomato42 commented 1 month ago

duplicate of #330