CVE-2019-14318

Crypto++ has a timing side-channel in ECDSA signature generation in version 8.3.0 and earlier. The underlying issue is non-constant-time scalar multiplication: ecp.cpp leaks scalar bit-length on prime-field curves and algebra.cpp leaks more on binary-field curves, enabling an attacker measuring d...