Huge flaw in Ubuntu Dapper’s Python Crypto Module
This is rather serious. Consider this:
% dd if=/dev/zero of=data bs=1 count=2679
% sha256sum data
a25f4ccc56ddf88a4fb3e11baec5838c5181a496f376cdd569f8fc782f8fdcdf data
A file of 2679 zeros and its SHA-256 hash. Nothing special.
Well, not exactly .. now look at the equivalent Python code:
$ python
Python 2.4.3 (#2, Oct 6 2006, 07:49:22)
[GCC 4.0.3 (Ubuntu 4.0.3-1ubuntu5)] on linux2
Type “help”, “copyright”, “credits” or “license” for more […]