Skip to content
This repository has been archived by the owner on Jun 11, 2024. It is now read-only.

BLS operations involving secret data are not constant time #8911

Closed
shuse2 opened this issue Aug 30, 2023 · 1 comment
Closed

BLS operations involving secret data are not constant time #8911

shuse2 opened this issue Aug 30, 2023 · 1 comment
Assignees
@has5aan
Labels
elements/cryptography type: bug
Milestone
Sprint 104

Comments

@shuse2
Copy link
Collaborator

shuse2 commented Aug 30, 2023

Description

Partially resolved in PR #8487, PR #8829, PR #8877, and PR #8881.
However, the code still has calls to SecretKey.fromBytes, which, as specified in the issue, is vulnerable to timing attacks as specified in the original issue #8449

Which version(s) does this affect? (Environment, OS, etc...)

6.0.0-beta.7
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees

@has5aan has5aan

Labels
elements/cryptography type: bug
Projects
None yet
Milestone
Sprint 104
Development

No branches or pull requests
3 participants
@shuse2 @has5aan @Madhulearn