Libgcrypt Vulnerability Allowing Session Key Exposure

CVE-2017-9526

What is CVE-2017-9526?

A vulnerability exists in Libgcrypt prior to version 1.7.7 that allows an attacker to potentially recover the long-term secret key by observing the EdDSA session key during the signing process through side-channel attacks. This issue stems from improper handling of the session key, which could be exposed, thereby compromising the security of cryptographic operations. In response, version 1.7.7 implements critical changes to store session keys in secure memory, ensuring that constant-time point operations are used within the MPI library to mitigate the risk of exposure.

References