CVE-2026-3579 Non-constant time multiplication subroutine __muldi3 on RISC-V RV32I

wolfSSL 5.8.4 on RISC-V RV32I architectures lacks a constant-time software implementation for 64-bit multiplication. The compiler-inserted muldi3 subroutine executes in variable time based on operand values. This affects multiple SP math functions sp256mul9, sp256sqr9, etc., leading to a timing...

CVE-2026-3579

wolfSSL 5.8.4 on RISC-V RV32I lacks a constant-time implementation for 64-bit multiplication; the compiler-inserted __muldi3 subroutine runs in variable time depending on operands, creating a timing side-channel that may expose cryptographic data. Affected SP math functions such as sp_256_mul_9 a...