CVE ID:	CVE-2014-5270
Description:	Libgcrypt before 1.5.4, as used in GnuPG and other products, does not properly perform ciphertext normalization and ciphertext randomization, which makes it easier for physically proximate attackers to conduct key-extraction attacks by leveraging the ability to collect voltage data from exposed metal, a different vector than CVE-2013-4576.
Test IDs:	1.3.6.1.4.1.25623.1.1.10.2014.0365   1.3.6.1.4.1.25623.1.1.1.2.2014.54   1.3.6.1.4.1.25623.1.0.841959   1.3.6.1.4.1.25623.1.1.10.2014.0381   1.3.6.1.4.1.25623.1.1.1.2.2014.93   1.3.6.1.4.1.25623.1.0.703073   1.3.6.1.4.1.25623.1.0.703024   1.3.6.1.4.1.25623.1.0.121254   1.3.6.1.4.1.25623.1.1.4.2014.1077.1   1.3.6.1.4.1.25623.1.0.841958
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-5270 Debian Security Information: DSA-3024 (Google Search) http://www.debian.org/security/2014/dsa-3024 Debian Security Information: DSA-3073 (Google Search) http://www.debian.org/security/2014/dsa-3073 http://www.cs.tau.ac.il/~tromer/handsoff/ http://lists.gnupg.org/pipermail/gnupg-announce/2014q3/000352.html http://openwall.com/lists/oss-security/2014/08/16/2