Back to search
CVE-2019-13628
Published: Oct 3, 2019
Modified: Aug 4, 2024
PUBLISHED
Description
wolfSSL and wolfCrypt 4.0.0 and earlier (when configured without --enable-fpecc, --enable-sp, or --enable-sp-math) contain a timing side channel in ECDSA signature generation. This allows a local attacker, able to precisely measure the duration of signature operations, to infer information about the nonces used and potentially mount a lattice attack to recover the private key used. The issue occurs because ecc.c scalar multiplication might leak the bit length.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
https://eprint.iacr.org/2011/232.pdf
x_refsource_MISC
https://tches.iacr.org/index.php/TCHES/article/view/7337
x_refsource_MISC
[oss-security] 20191002 Minerva: ECDSA key recovery from bit-length leakage
mailing-list
x_refsource_MLIST
https://minerva.crocs.fi.muni.cz/
x_refsource_MISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now