Ciphertext Normalization and Randomization Vulnerability in Libgcrypt for GnuPG
CVE-2014-5270
Currently unrated
What is CVE-2014-5270?
Libgcrypt, a cryptographic library used in GnuPG and various other products, is susceptible to vulnerabilities due to improper handling of ciphertext normalization and randomization. Attackers in close proximity to a vulnerable system can exploit this weakness through side-channel attacks, such as collecting voltage fluctuations from exposed components, to extract cryptographic keys. This type of vulnerability emphasizes the importance of robust cryptographic implementations to safeguard against physical access threats.