CVE-2020-10932: Medium severity Arm mbed TLS vulnerability
An issue was discovered in Arm Mbed TLS before 2.16.6 and 2.7.x before 2.7.15. An attacker that can get precise enough side-channel measurements can recover the long-term ECDSA private key by (1) reconstructing the projective coordinate of the result of scalar multiplication by exploiting side channels in the conversion to affine coordinates; (2) using an attack described by Naccache, Smart, and Stern in 2003 to recover a few bits of the ephemeral scalar from those projective coordinates via several measurements; and (3) using a lattice attack to get from there to the long-term ECDSA private key used for the signatures. Typically an attacker would have sufficient access when attacking an SGX enclave and controlling the untrusted OS.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2020-10932.
What is the severity of CVE-2020-10932?
The severity of CVE-2020-10932 is medium with a CVSS score of 4.7.
Which products are affected by CVE-2020-10932?
The ARM Mbed TLS versions 2.7.0 to 2.7.15 and 2.16.0 to 2.16.6 are affected by CVE-2020-10932.
How can an attacker exploit CVE-2020-10932?
An attacker can exploit CVE-2020-10932 by getting precise enough side-channel measurements to recover the long-term ECDSA private key by exploiting side channels.
Are there any fixes or patches available for CVE-2020-10932?
Yes, patches and updates are available for the affected versions of ARM Mbed TLS. Please refer to the vendor's website for the appropriate patch or update.