Skip to content
OpenAdvisories

Package · PyPI

wolfcrypt

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.7
    CVE-2019-13628

    wolfCrypt leaks cryptographic information via timing side channel

    wolfSSL and wolfCrypt 4.0.0 and earlier (when configured without --enable-fpecc, --enable-sp, or --enable-sp-math) contain a timing side channel in ECDSA signature generation. This allows a local attacker, able to precisely measure the duration of signature o…

    wolfssl wolfssl wolfcrypt Debian Ubuntu PyPI