CVE-2026-3579: Non-constant time multiplication subroutine __muldi3 on RISC-V RV32I
wolfSSL 5.8.4 on RISC-V RV32I architectures lacks a constant-time software implementation for 64-bit multiplication. The compiler-inserted muldi3 subroutine executes in variable time based on operand values. This affects multiple SP math functions (sp256mul9, sp256sqr9, etc.), leading to a timing side-channel that may expose sensitive cryptographic data.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3579?
CVE-2026-3579 is categorized as a medium severity vulnerability due to the potential for a timing attack.
How do I fix CVE-2026-3579?
To fix CVE-2026-3579, update wolfSSL to version 5.8.5 or later where the constant-time multiplication issue is addressed.
What systems are impacted by CVE-2026-3579?
CVE-2026-3579 affects wolfSSL version 5.8.4 specifically on RISC-V RV32I architectures.
What is a constant-time implementation in the context of CVE-2026-3579?
A constant-time implementation ensures that the execution time of an operation does not depend on the input values, preventing timing attacks.
Is CVE-2026-3579 related to cryptographic security?
Yes, CVE-2026-3579 is related to cryptographic security as it affects the multiplication subroutine used in cryptographic operations.