Secunia

A vulnerability has been reported in LibTomCrypt, which can be exploited by malicious people to create valid signatures without the private key.

The vulnerability is caused due to a mathematical error in the implementation of the El Gamal signature algorithm. This can be exploited to create valid signatures and sign arbitrary messages without the private key via an application using the ECC (Elliptic Curve Cryptosystem) signature scheme routines.

The vulnerability has been reported in version 1.02. Prior versions may also be affected.

Solution
The vulnerability has been fixed in the CVS repository.

Provided and/or discovered by
Reported by vendor.

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area