CVE-2019-16910: Medium severity Arm Mbed Crypto vulnerability
Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker to recover a private key via side-channel attacks if a victim signs the same message many times. (For Mbed TLS, the fix is also available in versions 2.7.12 and 2.16.3.)
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2019-16910?
CVE-2019-16910 is a vulnerability in Arm Mbed TLS and Arm Mbed Crypto that allows an attacker to recover a private key via side-channel attacks.
What is the severity of CVE-2019-16910?
CVE-2019-16910 has a severity score of 5.3 (medium).
Which software versions are affected by CVE-2019-16910?
Arm Mbed Crypto versions up to 2.0.0 and Arm Mbed TLS versions up to 2.7.12, 2.8.0 to 2.16.3, and 2.17.0 to 2.19.0 are affected.
How does CVE-2019-16910 work?
CVE-2019-16910 occurs when deterministic ECDSA is enabled and an RNG with insufficient entropy is used for blinding, allowing an attacker to recover a private key via side-channel attacks.
How can I fix CVE-2019-16910?
To fix CVE-2019-16910, update Arm Mbed TLS to version 2.19.0 or later and Arm Mbed Crypto to version 2.0.0 or later.