Cpan · Crypt::Dsa · CVE-2026-14570
**Name of the Vulnerable Software and Affected Versions**
Crypt::DSA versions prior to 1.22
**Description**
The software draws the DSA signing nonce and private key from a biased random generator. Specifically, the `makerandom()` function in `Crypt::DSA::Util` forces the high bit of every returned value to ensure an N-bit integer for prime search. This results in non-uniform values because the top bit is fixed. An attacker can recover the private key using a lattice attack by collecting a modest number of signatures and the public key.
**Recommendations**
Update to version 1.22 or later.
Generate new keys, as any keys used to sign with affected versions should be considered compromised.