CVE-2019-14318

State: Published
Severity: Not scored
Published: Jul 30, 2019
Updated: Aug 5, 2024
Reserved: Jul 27, 2019

Description

Crypto++ 8.3.0 and earlier contains a timing side channel in ECDSA signature generation. This allows a local or remote attacker, able to measure the duration of hundreds to thousands of signing operations, to compute the private key used. The issue occurs because scalar multiplication in ecp.cpp (prime field curves, small leakage) and algebra.cpp (binary field curves, large leakage) is not constant time and leaks the bit length of the scalar among other information.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://eprint.iacr.org/2011/232.pdf
https://tches.iacr.org/index.php/TCHES/article/view/7337
https://github.com/weidai11/cryptopp/issues/869
openSUSE-SU-2019:1968vendor-advisory
[oss-security] 20191002 Minerva: ECDSA key recovery from bit-length leakagemailing-list
https://minerva.crocs.fi.muni.cz/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.