GitHub Advisoryadvisory · Maven, NuGet

GHSA-6xx3-rg99-gc3p Timing based private key exposure in Bouncy Castle

MEDIUM Published 2021-08-13 Modified 2025-07-17 Official page ↗
Aliases
CVE-2020-15522
Ecosystem
Maven, NuGet
Packages
org.bouncycastle:bc-fips, org.bouncycastle:bcprov-ext-jdk15on, org.bouncycastle:bcprov-ext-jdk16, org.bouncycastle:bcprov-jdk14, org.bouncycastle:bcprov-jdk15, org.bouncycastle:bcprov-jdk15on, org.bouncycastle:bcprov-jdk15to18, org.bouncycastle:bcprov-jdk16, BouncyCastle
Severity
Moderate
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-203, CWE-362
Reviewed
2021-05-21

Affected packages

• Maven org.bouncycastle:bc-fips: < 1.0.2.1 → fixed in 1.0.2.1 • Maven org.bouncycastle:bcprov-ext-jdk15on: < 1.66 → fixed in 1.66 • Maven org.bouncycastle:bcprov-ext-jdk16: < 1.66 → fixed in 1.66 • Maven org.bouncycastle:bcprov-jdk14: < 1.66 → fixed in 1.66 • Maven org.bouncycastle:bcprov-jdk15: < 1.66 → fixed in 1.66 • Maven org.bouncycastle:bcprov-jdk15on: < 1.66 → fixed in 1.66 • Maven org.bouncycastle:bcprov-jdk15to18: < 1.66 → fixed in 1.66 • Maven org.bouncycastle:bcprov-jdk16: < 1.66 → fixed in 1.66 • NuGet BouncyCastle: < 1.8.7 → fixed in 1.8.7

Description

Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA before 1.0.2.1, BC before 1.66, BC-FNA before 1.0.1.1 have a timing issue within the EC math library that can expose information about the private key when an attacker is able to observe timing information for the generation of multiple deterministic ECDSA signatures.

Related

Alias · CVE (1)

  • CVE-2020-15522 Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA before 1.0.1.2, 1.0.2.1, and BC-FNA before 1.0.1.1 have a timing issue… vulnerability

Weakness · CWE (2)

  • CWE-203 Observable Discrepancy weakness
  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

References