1 matches found
PHPECC vulnerable to multiple cryptographic side-channel attacks
ECDSA Canonicalization PHPECC is vulnerable to malleable ECDSA signature attacks. Constant-Time Signer When generating a new ECDSA signature, the GMPMath adapter was used. This class wraps the GNU Multiple Precision arithmetic library GMP, which does not aim to provide constant-time implementatio...
6.5AI score
SaveExploits0References3Affected Software1
20