CVE-2026-44368— PyQuorum 安全漏洞

PyQuorum: Timing side‑channel in mul_mod

PyQuorum is a cryptographic library for secret sharing and key management. Prior to 0.2.1, the mul_mod function implements multiplication via a binary expansion loop whose execution time depends on the Hamming weight of the second operand (the exponent). An attacker who can measure the time of secret‑sharing operations (e.g., via a remote service) could progressively recover the values of shares, ultimately leading to secret reconstruction. This vulnerability is fixed in 0.2.1.

N/A

通过时间差异性导致的信息暴露

PyQuorum 安全漏洞

PyQuorum是svvqt个人开发者的一个密钥管理与秘密共享的加密库。 PyQuorum 0.2.1之前版本存在安全漏洞，该漏洞源于mul_mod函数通过二进制展开循环实现乘法，其执行时间取决于第二个操作数的汉明重量，攻击者可通过测量秘密共享操作的时间逐步恢复共享值。

N/A

N/A