CVE-2019-14318: Medium severity crypto++ vulnerability
Crypto++ 8.3.0 and earlier contains a timing side channel in ECDSA signature generation. This allows a local or remote attacker, able to measure the duration of hundreds to thousands of signing operations, to compute the private key used. The issue occurs because scalar multiplication in ecp.cpp (prime field curves, small leakage) and algebra.cpp (binary field curves, large leakage) is not constant time and leaks the bit length of the scalar among other information.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2019-14318?
CVE-2019-14318 is a vulnerability in Crypto++ 8.3.0 and earlier versions that allows a local or remote attacker to compute the private key used in ECDSA signature generation by measuring the duration of signing operations.
What is the severity of CVE-2019-14318?
The severity of CVE-2019-14318 is medium, with a CVSS score of 5.9.
How does CVE-2019-14318 affect Crypto++?
CVE-2019-14318 affects Crypto++ versions up to and including 8.3.0, exposing a timing side channel in ECDSA signature generation.
How can an attacker exploit CVE-2019-14318?
An attacker, able to measure the duration of signing operations, can exploit CVE-2019-14318 to compute the private key used in ECDSA signature generation.
Is there a fix for CVE-2019-14318?
Yes, upgrading to a version of Crypto++ that is not affected, such as 8.3.1 or later, can fix CVE-2019-14318.