Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 21:17:00 +0000 EUVD-2026-213572 https://cve.radiocsirt.org/vuln/euvd-2026-213572 EUVD-2026-213572 https://cve.radiocsirt.org/vuln/euvd-2026-213572 fkie_cve-2023-26556 https://cve.radiocsirt.org/vuln/fkie_cve-2023-26556 <p>io.finnet tss-lib before 2.0.0 can leak a secret key via a timing side-channel attack because it relies on the scalar-multiplication implementation in Go crypto/elliptic, which is not constant time (there is an if statement in a loop). One leak is in ecdsa/keygen/round_2.go. (bnb-chain/tss-lib and thorchain/tss are also affected.)</p> <p>io.finnet tss-lib before 2.0.0 can leak a secret key via a timing side-channel attack because it relies on the scalar-multiplication implementation in Go crypto/elliptic, which is not constant time (there is an if statement in a loop). One leak is in ecdsa/keygen/round_2.go. (bnb-chain/tss-lib and thorchain/tss are also affected.)</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-26556 GHSA-3w84-4mjc-rjw7 — IO FinNet tss-lib vulnerable to timing attack from non-constant time scalar multiplication https://cve.radiocsirt.org/vuln/ghsa-3w84-4mjc-rjw7 <p><strong>Affected:</strong> Go: github.com/bnb-chain/tss-lib, Go: github.com/binance-chain/tss-lib</p> <p>io.finnet tss-lib before 2.0.0 can leak a secret key via a timing side-channel attack because it relies on the scalar-multiplication implementation in Go crypto/elliptic, which is not constant time (there is an if statement in a loop). One leak is in ecdsa/keygen/round_2.go. (bnb-chain/tss-lib and thorchain/tss are also affected.)</p> <p><strong>Affected:</strong> Go: github.com/bnb-chain/tss-lib, Go: github.com/binance-chain/tss-lib</p> <p>io.finnet tss-lib before 2.0.0 can leak a secret key via a timing side-channel attack because it relies on the scalar-multiplication implementation in Go crypto/elliptic, which is not constant time (there is an if statement in a loop). One leak is in ecdsa/keygen/round_2.go. (bnb-chain/tss-lib and thorchain/tss are also affected.)</p> https://cve.radiocsirt.org/vuln/ghsa-3w84-4mjc-rjw7 gsd-2023-26556 https://cve.radiocsirt.org/vuln/gsd-2023-26556 gsd-2023-26556 https://cve.radiocsirt.org/vuln/gsd-2023-26556