Skip to content
OpenAdvisories

Package · Debian

php-phpseclib4

1 known vulnerabilities.

1 result · Feed

  • Medium 6.3

    phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery

    phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php performs data-dependent conditional modular reductions in add() and subtract(). During the Montgomery l…