Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2024/07/17 6:30 p.m.27 views

vodozemac's usage of non-constant time base64 decoder could lead to leakage of secret key material

Versions before 0.7.0 of vodozemac use a non-constant time base64 implementation for importing key material for Megolm group sessions and PkDecryption Ed25519 secret keys. This flaw might allow an attacker to infer some information about the secret key material through a side-channel attack. Impa...

2.9CVSS6.4AI score0.00201EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder