Python Simple Encryption Program RSA Key Size Vulnerability

Vulnerability

A vulnerability exists in the Python Simple Encryption Program in the file Programs/P73_SimplePythonEncryption.py, specifically in version 1.1 prior to the patch in version 1.2. The issue arises from the use of a weak cryptographic key, which allows an attacker to potentially decrypt data through brute force attacks, impacting the entire application.

Impact

The vulnerability allows for decryption of data via brute force, undermining the application's encryption integrity.

Remediation

Users can increase the key size to at least 2048 bits for RSA or DSA, and at least 256 bits for ECC. After applying this workaround, users should upgrade to version 1.2.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
2.5
exploitability
8.1
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
5.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.