GHSA-hrjm-c879-pp86
libsecp256k1 contains side-channel timing attack
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| crates.io | libsecp256k1 | < 0.3.1 | 0.3.1 |
Details
As written in the advisory (Markdown source, shown as plain text).
Versions of libsecp256k1 prior to 0.3.1 did not execute `Scalar::check_overflow` in constant time. This allows an attacker to potentially leak information via a timing attack. The flaw was corrected by modifying `Scalar::check_overflow` to execute in constant time.
References
External links from the advisory. They lead to third-party sites.