Skip to content
OpenAdvisories

Product · RustCrypto

RSA

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.9

    RustCrypto/RSA vulnerable to a Marvin Attack via key recovery through timing sidechannels

    RustCrypto/RSA is a portable RSA implementation in pure Rust. Due to a non-constant-time implementation, information about the private key is leaked through timing information which is observable over the network. An attacker may be able to use that informati…