Aller au contenu
en Se connecter
Non notée

CVE-2026-77696 Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing…

Description

Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. Impact summary: An attacker able to measure SM2 signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hidden Number Problem attack, lead to recovery of the private key. CWE: CWE-208: Observable Timing Discrepancy Description: SM2 signature generation computes the signature value using variable-time BIGNUM operations on the secret nonce and the private key, so the time taken to produce an SM2 signature depends on these secret values, forming a timing side-channel. Applications performing SM2 signature generation are affected on all platforms. FIPS Impact: no SM2 is not a FIPS algorithm.

Produits et versions touchés

Produit Versions touchées Corrigé en
OpenSSL 4.0 4.0.0 → < 4.0.3 4.0.3
OpenSSL 3.6 3.6.0 → < 3.6.5 3.6.5
OpenSSL 3.5 3.5.0 → < 3.5.9 3.5.9
OpenSSL 3.4 3.4.0 → < 3.4.8 3.4.8
OpenSSL 3.0 3.0.0 → < 3.0.23 3.0.23
OpenSSL 1.1 premières → < 1.1.1zj 1.1.1zj

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de OpenSSL

Les 141 CVE de OpenSSL →
CVE-2026-84784 Issue summary: A malicious remote peer may flood the local QUIC stack with NEW_CONNECTION_ID frames by avoiding a… Non notée CVE-2026-84783 Issue summary: The first concurrent use of the same X.509 certificate by several threads may cause its cached… Non notée CVE-2026-84782 Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended… Non notée CVE-2026-75806 Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single… Non notée
Suivre cette CVE