GitHub Advisoryadvisory · crates.io

GHSA-hrjm-c879-pp86 libsecp256k1 contains side-channel timing attack

HIGH Published 2021-08-25 Modified 2023-08-25 Official page ↗
Aliases
CVE-2019-25003
Ecosystem
crates.io
Packages
libsecp256k1
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-208
Reviewed
2021-08-19

Affected packages

• crates.io libsecp256k1: < 0.3.1 → fixed in 0.3.1

Description

Versions of libsecp256k1 prior to 0.3.1 did not execute `Scalar::check_overflow` in constant time. This allows an attacker to potentially leak information via a timing attack. The flaw was corrected by modifying `Scalar::check_overflow` to execute in constant time.

Related

Alias · CVE (1)

  • CVE-2019-25003 An issue was discovered in the libsecp256k1 crate before 0.3.1 for Rust. vulnerability

Weakness · CWE (1)

  • CWE-208 Observable Timing Discrepancy weakness

References