cve-2024-13176-timing-analysis

CVE-2024-13176 中低幅度 ECDSA 时序泄漏的插桩检测 本仓库包含针对 CVE-2024-13176 的一项独立研究的研究报告、网站、数据、原始材料与可复现性文件。 该项目旨在考察：在受控的 ARM64 虚拟化 Linux 环境中，是否能够检测到 OpenSSL ECDSA 签名所报告的与 nonce 相关的时序条件。 主要结果 确证性实验使用 ECDSA P-521 配合源码级插桩，对 OpenSSL 3.4.0 与 OpenSSL 3.4.1 进行了对比。 最终数据集包含横跨 30 个成对采集块的 600,000 次签名观测。 在主要内部时序观测点： OpenSSL...

pairing

基于配对的密码学的优化 本仓库包含与一系列持续发布的博客文章相对应的可运行 Rust 代码，这些文章以 BLS12-381 作为参考曲线，介绍基于配对的密码学中的优化。 请注意： 本代码仅供教学用途，未经安全审计，不适合用于生产环境。使用风险自负。 Montgomery 算术（第 1 部分，共 2 部分） 本文将从头到尾介绍模块化 Montgomery 算术，包括背景、替代方案、理论及 Rust 中的实用可运行代码，其运行速度比通用大整数实现快 9 倍 。下一篇博客文章将进一步优化（相对）重量级的乘法例程，采用裸机 x86-64 汇编语言编写。...

Linux Distros Unpatched Vulnerability : CVE-2026-88830

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A unit confusion in BusyBox TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted...

SUSE CVE-2026-88830

A unit confusion in BusyBox TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted ClientKeyExchange message...

CVE-2026-88830

A unit confusion in BusyBox TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted ClientKeyExchange message...

DEBIAN-CVE-2026-88830

A unit confusion in BusyBox TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted ClientKeyExchange message...

CVE-2026-88830

A unit confusion in BusyBox TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted ClientKeyExchange message...

UBUNTU-CVE-2026-88830

A unit confusion in BusyBox TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted ClientKeyExchange message...

CVE-2026-88830

A unit confusion in BusyBox TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted ClientKeyExchange message. This vulnerability occurs because the system allocates bytes instead of digits during the reduction process. To mitigate thi...

CVE-2026-88830 Busybox: busybox: tls montgomery reduction allocates bytes instead of digits, causing a pre-auth heap buffer overflow

A unit confusion in BusyBox TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted ClientKeyExchange message...

CVE-2026-88830 Busybox: busybox: tls montgomery reduction allocates bytes instead of digits, causing a pre-auth heap buffer overflow

A unit confusion in BusyBox TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted ClientKeyExchange message...

CVE-2026-88830

A unit confusion in BusyBox TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted ClientKeyExchange message...

EUVD-2026-85425

A unit confusion in BusyBox TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted ClientKeyExchange message...

CVE-2026-88830

A unit confusion in BusyBox TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted ClientKeyExchange message. Mitigation Do not use the BusyBox sslserver applet in production environments. Use a well-maintained TLS implementation such...

CVE-2026-88830: Incorrect Calculation of Buffer Size

A unit confusion in BusyBox TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted ClientKeyExchange message...

PT-2026-97416

Name of the Vulnerable Software and Affected Versions BusyBox affected versions not specified Description A unit confusion bug in the TLS Montgomery reduction buffer allocation leads to a heap buffer overflow. This occurs during the processing of a crafted ClientKeyExchange message during the...

Astra Linux – Vulnerability in openssl1.0

There is an overflow bug in the x6464 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are...

EUVD-2026-69576

phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery...

GHSA-Q97C-8QH3-FPC6 phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery

The pure-PHP X25519 scalar multiplication in phpseclib is not constant-time. Field addition and subtraction each perform a data-dependent conditional modular reduction, so the cost of each Montgomery-ladder step is a linear function of that step's reduction count which is a quantity determined by...

Linux Distros Unpatched Vulnerability : CVE-2026-84308

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php...