ElGamal Vulnerability in Libgcrypt Affecting Security of Encrypted Messages

CVE-2018-6829

What is CVE-2018-6829?

The ElGamal implementation in Libgcrypt versions through 1.8.2 contains a vulnerability that results in improper encoding of plaintext data during encryption. This flaw can potentially allow attackers to glean sensitive information from ciphertexts, compromising the confidentiality of encrypted messages. The implementation does not maintain semantic security against ciphertext-only attacks, violating the Decisional Diffie-Hellman (DDH) assumption. Consequently, this vulnerability poses a significant risk to data security for users operating vulnerable versions.

References