Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 949405 - <dev-lang/go-1.22.12,1.23.6}: crypto/elliptic: timing sidechannel for P-256 on ppc64le
Summary: <dev-lang/go-1.22.12,1.23.6}: crypto/elliptic: timing sidechannel for P-256 o...
Status: CONFIRMED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Gentoo Security
URL:
Whiteboard: A4 [glsa?]
Keywords:
Depends on: 949406 949407
Blocks:
  Show dependency tree
 
Reported: 2025-02-07 21:36 UTC by William Hubbs
Modified: 2025-03-20 20:39 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description William Hubbs gentoo-dev 2025-02-07 21:36:30 UTC 
Due to the usage of a variable time instruction in the assembly implementation
of an internal function, a small number of bits of secret scalars are leaked on
the ppc64le architecture. Due to the way this function is used, we do not
believe this leakage is enough to allow recovery of the private key when P-256
is used in any well known protocols.

This is CVE-2025-22866 and Go issue https://go.dev/issue/71383.