CLEANSTART-2026-XR25689 Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel

CVE-2026-77696 affects multiple packages. Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. See references for individual vulnerability details...