156 matches found
CVE-2026-63410
secp256k1-native is a native C secp256k1 implementation for Ruby. In affected native builds, native constant-time scalar multiplication through Pointmul or scalarmultiplyct can leak timing information about a secret scalar when compiled by a toolchain that reconstructs branchless selection into a...
CVE-2026-63410 secp256k1-native: Compiler-reconstructed secret-dependent branch in native scalar multiplication
secp256k1-native is a native C secp256k1 implementation for Ruby. In affected native builds, native constant-time scalar multiplication through Pointmul or scalarmultiplyct can leak timing information about a secret scalar when compiled by a toolchain that reconstructs branchless selection into a...
CVE-2026-63410
The secp256k1-native Ruby library contains a vulnerability where native constant-time scalar multiplication via Point#mul or scalar_multiply_ct can leak secret scalar information through timing side-channels. This occurs because certain compiler toolchains, specifically GCC 14.3.0, 15.1.0, and 15...
EUVD-2026-114552
secp256k1-native is a native C secp256k1 implementation for Ruby. In affected native builds, native constant-time scalar multiplication through Pointmul or scalarmultiplyct can leak timing information about a secret scalar when compiled by a toolchain that reconstructs branchless selection into a...
quantum
Shor's Algorithm for ECDLP — Q-Day Prize Submission Quantum solver for the Elliptic Curve Discrete Logarithm Problem ECDLP, built for the Q-Day Prize Challenge by Project Eleven. The goal: recover ECC private keys on real quantum hardware using Shor's algorithm. Author : Giancarlo Lelli Contact :...
Phantom-Signature-Attack
This research paper presents a comprehensive cryptanalytic study of critical vulnerabilities in the Bitcoin protocol’s digital signature implementation, namely the Phantom Signature Attack CVE-2025-29774 and the fundamental SIGHASHSINGLE processing error . The study demonstrates that incorrect...
CVE-2026-63410: sgbett secp256k1-native: secp256k1-native is a native C secp256k1 implementation for Ruby
secp256k1-native is a native C secp256k1 implementation for Ruby. In affected native builds, native constant-time scalar multiplication through Pointmul or scalarmultiplyct can leak timing information about a secret scalar when compiled by a toolchain that reconstructs branchless selection into a...
quantumslop
Shor's Algorithm for ECDLP — Q-Day Prize Submission Quantum solver for the Elliptic Curve Discrete Logarithm Problem ECDLP, built for the Q-Day Prize Challenge by Project Eleven. The goal: recover ECC private keys on real quantum hardware using Shor's algorithm. Author : Giancarlo Lelli Contact :...
PT-2026-125878
🚨 MAJOR SECURITY ALERT: bitcoinjs patches multiple high security issues in their packages We hit some of the most critical infrastructure in Bitcoin is dependent on bitcoinjs packages—bitcoinjs-lib, bip39, tiny-secp256k1 were affected are ato multiple high security issues affecting major wallets,...
PT-2026-125876
🚨 MAJOR SECURITY ALERT: bitcoinjs patches multiple high security issues in their packages We hit some of the most critical infrastructure in Bitcoin is dependent on bitcoinjs packages—bitcoinjs-lib, bip39, tiny-secp256k1 were affected are ato multiple high security issues affecting major wallets,...
PT-2026-125875
🚨 MAJOR SECURITY ALERT: bitcoinjs patches multiple high security issues in their packages We hit some of the most critical infrastructure in Bitcoin is dependent on bitcoinjs packages—bitcoinjs-lib, bip39, tiny-secp256k1 were affected are ato multiple high security issues affecting major wallets,...
PT-2026-125877
🚨 MAJOR SECURITY ALERT: bitcoinjs patches multiple high security issues in their packages We hit some of the most critical infrastructure in Bitcoin is dependent on bitcoinjs packages—bitcoinjs-lib, bip39, tiny-secp256k1 were affected are ato multiple high security issues affecting major wallets,...
Malicious Package
Overview secp256k1-lib is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in secp256k1-lib (npm)
Source: amazon-inspector dd45f2520f57a18e182ea26170f8d6d3b4296929c66dbbf2ea0eb632adb1f46a Package name mimics the widely used secp256k1 cryptography library but contains no cryptographic functionality. The declared main index.js is a single 33KB obfuscator.io-packed bundle whose only readable...
Malicious code in secp256k1-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd45f2520f57a18e182ea26170f8d6d3b4296929c66dbbf2ea0eb632adb1f46a Package name mimics the widely used secp256k1 cryptography library but contains no cryptographic functionality. The declared main index.js is a singl...
MAL-2026-14255 Malicious code in secp256k1-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd45f2520f57a18e182ea26170f8d6d3b4296929c66dbbf2ea0eb632adb1f46a Package name mimics the widely used secp256k1 cryptography library but contains no cryptographic functionality. The declared main index.js is a singl...
CVE-2026-43606
Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or electromagnetic emanation attacks, resulting in high confidentiality and integrity impact due to the exposure of private cryptograph...
CVE-2026-43606
CVE-2026-43606 concerns the AMD Vitis Libraries ECDSA secp256k1 component. The vulnerability is described as an observable timing discrepancy that an attacker with local access could use to perform timing analysis or electromagnetic emanation attacks, with high confidentiality and integrity impac...
EUVD-2026-56555
Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or electromagnetic emanation attacks, resulting in high confidentiality and integrity impact due to the exposure of private cryptograph...
CVE-2026-43606
Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or electromagnetic emanation attacks, resulting in high confidentiality and integrity impact due to the exposure of private cryptograph...