https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 12:14:25 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-32468 EUVD-2026-32468 https://cve.radiocsirt.org/vuln/euvd-2026-32468 https://cve.radiocsirt.org/vuln/fkie_cve-2021-43398 <p>Crypto++ (aka Cryptopp) 8.6.0 and earlier contains a timing leakage in MakePublicKey(). There is a clear correlation between execution time and private key length, which may cause disclosure of the length information of the private key. This might allow attackers to conduct timing attacks. NOTE: this report is disputed by the vendor and multiple third parties. The execution-time differences are intentional. A user may make a choice of a longer key as a tradeoff between strength and performance. In making this choice, the amount of information leaked to an adversary is of infinitesimal value</p> <p>Crypto++ (aka Cryptopp) 8.6.0 and earlier contains a timing leakage in MakePublicKey(). There is a clear correlation between execution time and private key length, which may cause disclosure of the length information of the private key. This might allow attackers to conduct timing attacks. NOTE: this report is disputed by the vendor and multiple third parties. The execution-time differences are intentional. A user may make a choice of a longer key as a tradeoff between strength and performance. In making this choice, the amount of information leaked to an adversary is of infinitesimal value</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-43398 https://cve.radiocsirt.org/vuln/ghsa-86rq-fj99-chhj <p>Crypto++ (aka Cryptopp) 8.6.0 and earlier contains a timing leakage in MakePublicKey(). There is a clear correlation between execution time and private key length, which may cause disclosure of the length information of the private key. This might allow attackers to conduct timing attacks.</p> <p>Crypto++ (aka Cryptopp) 8.6.0 and earlier contains a timing leakage in MakePublicKey(). There is a clear correlation between execution time and private key length, which may cause disclosure of the length information of the private key. This might allow attackers to conduct timing attacks.</p> https://cve.radiocsirt.org/vuln/ghsa-86rq-fj99-chhj https://cve.radiocsirt.org/vuln/gsd-2021-43398 gsd-2021-43398 https://cve.radiocsirt.org/vuln/gsd-2021-43398