GitHub Advisoryadvisory · PyPI

GHSA-q95h-vc86-hv77 wolfCrypt leaks cryptographic information via timing side channel

MEDIUM Published 2022-05-24 Modified 2023-09-25 Official page ↗
Aliases
CVE-2019-13628
Ecosystem
PyPI
Packages
wolfcrypt
Severity
Moderate
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-203
Reviewed
2023-07-17

Affected packages

• PyPI wolfcrypt: < 4.1.0 → fixed in 4.1.0

Description

wolfSSL and wolfCrypt 4.0.0 and earlier (when configured without `--enable-fpecc`, `--enable-sp`, or` --enable-sp-math`) contain a timing side channel in ECDSA signature generation. This allows a local attacker, able to precisely measure the duration of signature operations, to infer information about the nonces used and potentially mount a lattice attack to recover the private key used. The issue occurs because ecc.c scalar multiplication might leak the bit length.

Related

Alias · CVE (1)

  • CVE-2019-13628 wolfSSL and wolfCrypt 4.0.0 and earlier (when configured without --enable-fpecc, --enable-sp, or --enable-sp-math) contain a timing side… vulnerability

Weakness · CWE (1)

  • CWE-203 Observable Discrepancy weakness

References