Weakness (CWE)
CWE-733: Compiler Optimization Removal or Modification of Security-critical Code
Base Incomplete
The developer builds a security-critical protection mechanism into the software, but the compiler optimizes the program such that the mechanism is removed or modified.
Source: MITRE CWE-733
1 result · Clear filters · Feed
-
Low 2.9
curve25519-dalek has timing variability in `curve25519-dalek`'s `Scalar29::sub`/`Scalar52::sub`
The curve25519-dalek crate before 4.1.3 for Rust has a constant-time operation on elliptic curve scalars that is removed by LLVM.