CVE-2019-13628

wolfSSL and wolfCrypt 4.0.0 and earlier when configured without --enable-fpecc, --enable-sp, or --enable-sp-math contain a timing side channel in ECDSA signature generation. This allows a local attacker, able to precisely measure the duration of signature operations, to infer information about th...

CVE-2019-13628

wolfSSL and wolfCrypt 4.0.0 and earlier when configured without --enable-fpecc, --enable-sp, or --enable-sp-math contain a timing side channel in ECDSA signature generation. This allows a local attacker, able to precisely measure the duration of signature operations, to infer information about th...

CVE-2019-13628

CVE-2019-13628 affects wolfSSL/wolfCrypt 4.0.0 and earlier when built without --enable-fpecc, --enable-sp, or --enable-sp-math. The issue is a timing side-channel in ECDSA signature generation caused by ecc.c scalar multiplication leaking bit-length information. This may allow a local attacker wh...