Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2024/06/18 9:56 p.m.28 views

curve25519-dalek has timing variability in `curve25519-dalek`'s `Scalar29::sub`/`Scalar52::sub`

Timing variability of any kind is problematic when working with potentially secret values such as elliptic curve scalars, and such issues can potentially leak private keys and other secrets. Such a problem was recently discovered in curve25519-dalek. The Scalar29::sub 32-bit and Scalar52::sub...

5.1CVSS6.2AI score0.00152EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2024/06/18 12:0 p.m.37 views

RUSTSEC-2024-0344 Timing variability in `curve25519-dalek`'s `Scalar29::sub`/`Scalar52::sub`

Timing variability of any kind is problematic when working with potentially secret values such as elliptic curve scalars, and such issues can potentially leak private keys and other secrets. Such a problem was recently discovered in curve25519-dalek. The Scalar29::sub 32-bit and Scalar52::sub...

5.1CVSS7.2AI score0.00152EPSS
SaveExploits0References3
Rows per page
Query Builder