CIRCL has an incorrect calculation in secp384r1 CombinedMult

Mô tả

Tham khảo

• cloudflare/circl security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2026-1229 · ADVISORY
• cloudflare/circl#583 · WEB
• cloudflare/circl · PACKAGE
• cloudflare/circl release v1.6.3 · WEB

Lỗ hổng khác của github.com/cloudflare/circl

• CVE-2025-8556THẤP 3.7A flaw was found in CIRCL's implementation of the FourQ elliptic curve. This vulnerability allows an attacker to compromise session security…
• GO-2024-2453Timing side channel in github.com/cloudflare/circl
• GHSA-9763-4f94-gfchCAOCIRCL's Kyber: timing side-channel (kyberslash2)
• CVE-2023-1732CAO 8.2When sampling randomness for a shared secret, the implementation of Kyber and FrodoKEM, did not check whether crypto/rand.Read() returns an …