Critical Key Flaw in Fedora's perl-Crypt-DSA Affects Key Generation

A significant cryptographic vulnerability (CVE-2026-14570) has been identified in the perl-Crypt-DSA package affecting Fedora 43 and 44. The flaw, known as modulo bias, compromises private key generation, allowing attackers to recover private keys after generating hundreds of signatures. Users are advised to consider their keys compromised and to generate new ones immediately. The flaw was addressed in updates released on July 3, 2026, by Paul Howarth and Yaakov Selkowitz. The vulnerability is critical due to the potential for complete private key compromise, impacting systems that rely on this cryptographic library. The flaw was published on July 5, 2026, and is applicable to Fedora systems using the affected versions of perl-Crypt-DSA.

Key Points: • CVE-2026-14570 exposes private key generation flaws in Fedora's perl-Crypt-DSA. • Attackers can recover private keys after generating hundreds of signatures due to modulo bias. • Users must generate new keys immediately as existing keys are considered compromised.