gnutls: timing side-channel in the RSA-PSK authentication

A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS1 v1.5 padding...

AZL-37310 CVE-2023-45287 affecting package golang for versions less than 1.21.6-1

Before Go 1.20, the RSA based TLS key exchanges used the math/big library, which is not constant time. RSA blinding was applied to prevent timing attacks, but analysis shows this may not have been fully effective. In particular it appears as if the removal of PKCS1 padding may leak timing...

The vulnerability of the `ce_pkcs1_pss_padding_verify_auto_recover_saltlen` function in the Qualcomm Android operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the cepkcs1psspaddingverifyautorecoversaltlen function in the Android operating system is related to errors in managing cryptographic keys. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...