Eran Tromer

**Name of the Vulnerable Software and Affected Versions** Libgcrypt versions prior to 1.6.5 **Description** The issue makes it easier for physically proximate attackers to extract ECDH keys by measuring electromagnetic emanations due to improper elliptic-point curve multiplication during decryption. **Recommendations** For versions prior to 1.6.5, update to version 1.6.5 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** libgcrypt versions prior to 1.5.4 **Description** The issue concerns the improper performance of ciphertext normalization and ciphertext randomization in libgcrypt, which can be exploited by physically proximate attackers to conduct key-extraction attacks. This is achieved by collecting voltage data from exposed metal, representing a different attack vector. The vulnerability can lead to a breach of confidentiality of protected information and can be exploited locally. **Recommendations** For libgcrypt versions prior to 1.5.4, update to version 1.5.4 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** GnuPG versions 1.4.5 through 1.4.15 **Description** The issue allows attackers to extract RSA keys via a chosen-ciphertext attack and acoustic cryptanalysis during decryption. This can be exploited remotely and may lead to a violation of the confidentiality and integrity of protected information. The vulnerability is related to the generation of RSA keys using sequences of introductions with certain patterns, which introduces a side channel. **Recommendations** For GnuPG versions 1.4.5 through 1.4.15, update to version 1.4.16 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive information and physical devices to minimize the risk of exploitation. Avoid using the vulnerable GnuPG versions for sensitive operations until the issue is resolved.