Skip to content
OpenAdvisories

Package · PyPI

wolfcrypt

1 known vulnerabilities.

1 result · Feed

  • Medium 4.7

    wolfCrypt leaks cryptographic information via timing side channel

    wolfSSL and wolfCrypt 4.0.0 and earlier (when configured without --enable-fpecc, --enable-sp, or --enable-sp-math) contain a timing side channel in ECDSA signature generation. This allows a local attacker, able to precisely measure the duration of signature o…