CVE-2024-13176

Low

Published: —Translated: 27/07/2026(UTC)NVD NIST

Summary

A timing side-channel in ECDSA signature computations could potentially allow recovering the private key by an attacker. Measuring timing could lead to private key recovery.

Risk Assessment

Recovery of the private key by an attacker can lead to impersonation, breaking digital signature integrity, and compromising communication confidentiality.

Recommendation

Update the cryptographic library to a patched version. Consider additional protections against side-channel attacks.

Original NVD description (English source)

Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measuring the timing would r