Executive brief
Timing attack from non-constant time scalar arithmetic in github.com/bnb-chain/tss-lib
Affected products
- Go github.com/binance-chain/tss-lib
- Go github.com/bnb-chain/tss-lib
Junglewise Threat Intelligence
CVE-2023-26557: GO-2023-1733 - Timing attack from non-constant time scalar arithmetic in github.com/bnb-chain/tss-lib
CVE-2023-26557 · Severity: low · CVSS 3.1 · Published 2023-07-11
Technologies: github.com/binance-chain/tss-lib (Go), github.com/bnb-chain/tss-lib (Go). Vendors: Go.
Related threats
- GO-2022-0769 - Incorrect Default Permissions in Binance tss-lib in github.com/binance-chain/tss-lib
- tss-lib leaks secret keys in response to incorrectly constructed Paillier moduli
- GO-2023-1904 - Collision of hash values in github.com/bnb-chain/tss-lib
- GO-2023-1867 - Replay attacks involving proofs in github.com/bnb-chain/tss-lib
- GO-2023-1732 - Timing attack from non-constant time scalar multiplication in github.com/bnb-chain/tss-lib