Beveiligingsadvies

CVE-2026-3580

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-19 19:46:58

Laatst bijgewerkt 2026-03-19 20:25:20

Toegewezen door wolfSSL

CVSS-score 2.1

Status PUBLISHED

Beschrijving

In wolfSSL 5.8.4, constant-time masking logic in sp_256_get_entry_256_9 is optimized into conditional branches (bnez) by GCC when targeting RISC-V RV32I with -O3. This transformation breaks the side-channel resistance of ECC scalar multiplication, potentially allowing a local attacker to recover secret keys via timing analysis.

← Alle CVE's bekijken Bekijk op cve.org ↗