Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The RSA-CRT implementation in PolarSSL before 1.2.9 does not properly perform Montgomery multiplication, which might allow remote attackers to conduct a timing side-channel attack and retrieve RSA private keys.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PolarSSL RSA-CRT实现加密问题漏洞
Vulnerability Description
Offspark PolarSSL是荷兰Offspark公司的一个SSL加密库。该库具有便于移植和集成的特点。 PolarSSL 1.2.8及之前的版本中的RSA-CRT实现中存在安全漏洞，该漏洞源于程序没有正确执行Montgomery乘法。远程攻击者可利用该漏洞实施抗计时旁路攻击，并检索RSA私钥。
CVSS Information
N/A
Vulnerability Type
N/A