CVE-2023-26556 IO FinNet tss-lib vulnerable to timing attack from non-constant time scalar multiplication

What is CVE-2023-26556?

CVE-2023-26556 is a critical vulnerability in n/a, published on 21 Apr 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

io.finnet tss-lib before 2.0.0 can leak a secret key via a timing side-channel attack because it relies on the scalar-multiplication implementation in Go crypto/elliptic, which is not constant time (there is an if statement in a loop). One leak is in ecdsa/keygen/round_2.go. (bnb-chain/tss-lib and thorchain/tss are also affected.)

Weakness: CWE-203

Which versions are affected by CVE-2023-26556?

6 open source packages ship an affected version, including github.com/binance-chain/tss-lib and github.com/bnb-chain/tss-lib. It affects 1 product.

Products include Iofinnet Tss-Lib.

How do I fix CVE-2023-26556?

Upgrade github.com/binance-chain/tss-lib to 2.0.0 or later.

Is CVE-2023-26556 being exploited?

There is no known exploitation of CVE-2023-26556 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2023-26557 IO FinNet tss-lib vulnerable to timing attack from non-constant time scalar arithmetic High 7.5
• CVE-2022-47930 IO FinNet tss-lib vulnerable to replay attacks involving proofs Medium 6.8
• CVE-2022-47931 Collision of hash values in github.com/bnb-chain/tss-lib Medium 6.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-3w84-4mjc-rjw7, GO-2023-1732.