Skip to content
OpenAdvisories

Package · Packagist

simplito/elliptic-php

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.4
    CVE-2019-10764

    Timing attacks might allow practical recovery of the long-term private key

    In elliptic-php versions priot to 1.0.6, Timing attacks might be possible which can result in practical recovery of the long-term private key generated by the library under certain conditions. Leakage of a bit-length of the scalar during scalar multiplication…

    simplito/elliptic-php Packagist