ECDSA signing is vulnerable to timing attacks

frasertweedale / hs-jose

Haskell JOSE and JWT library

http://hackage.haskell.org/package/jose

Apache License 2.0

122 stars 46 forks source link

Open frasertweedale opened 9 years ago

frasertweedale commented 9 years ago

Crypto.PubKey.ECC.ECDSA signing operations are vulnerable to timing attacks. Switch to a safe implementation.

sophie-h commented 7 years ago

Am I right to assume this bug has actually been fixed with #12 been closed? There is still a warning in the README.

frasertweedale commented 7 years ago

@sophie-h alas no, the latest version of cryptonite still apparently has the timing problem: https://hackage.haskell.org/package/cryptonite-0.21/docs/Crypto-PubKey-ECC-ECDSA.html

sophie-h commented 7 years ago

Thank you for the clarification!