PT-2026-55751 · Cpan · Crypt::Dsa

Published 2026-07-05 · Updated 2026-07-05 · CVE-2026-14570

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Crypt::DSA versions prior to 1.22

Description The software draws the DSA signing nonce and private key from a biased random generator. Specifically, the makerandom() function in Crypt::DSA::Util forces the high bit of every returned value to ensure an N-bit integer for prime search. This results in non-uniform values because the top bit is fixed. An attacker can recover the private key using a lattice attack by collecting a modest number of signatures and the public key.

Recommendations Update to version 1.22 or later. Generate new keys, as any keys used to sign with affected versions should be considered compromised.

Use of Insufficiently Random Values

Weakness Enumeration

CWE-330

Related Identifiers

CVE-2026-14570

Affected Products

Crypt::Dsa

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-14570 · Security Note
• https://metacpan.org/release/TIMLEGGE/Crypt-DSA-1.22/changes · Note
• https://metacpan.org/release/TIMLEGGE/Crypt-DSA-1.22/diff/TIMLEGGE/Crypt-DSA-1.21#lib/Crypt/DSA/Util.pm · Note
• http://openwall.com/lists/oss-security/2026/07/05/1 · Note
• https://twitter.com/oss_security/status/2073581700534182140 · Twitter Post
• https://metacpan.org/release/TIMLEGGE/Crypt-DSA-1.21/source/lib/Crypt/DSA/Util.pm#L56 · Note