An issue was discovered in the DTLS handshake implementation in wolfSSL before 4.5.0

The private-key operations in ecc.c in wolfSSL before 4.4.0 do not use a constant-time modular inverse when mapping to affine coordinates, aka a "projective coordinates leak."

An issue was discovered in wolfSSL before 4.3.0 in a non-default configuration where DSA is enabled

In wolfSSL before 4.3.0, wc_ecc_mulmod_ex does not properly resist side-channel attacks

wolfSSL and wolfCrypt 4.1.0 and earlier (formerly known as CyaSSL) generate biased DSA nonces

Fault injection attack with ML-DSA and ML-KEM on ARM

Generating the ECDSA nonce k samples a random number r and then truncates this randomness with a modular reduction mod n where n is the order of the elliptic curve

In wolfSSL through 4.6.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers to obtain information about secret RSA keys via a…

Compiler-induced timing leak in sp_256_get_entry_256_9 on RISC-V

wolfSSL and wolfCrypt 4.0.0 and earlier (when configured without --enable-fpecc, --enable-sp, or --enable-sp-math) contain a timing side channel in ECDSA signature generation

wolfcrypt/src/ecc.c in wolfSSL before 3.15.1.patch allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP

Curve25519 Blinding

Continued acceptance of SHA-1/MD5 digests in certificate processing

1-2 Byte Buffer Overflow in wolfSSL_X509_notAfter/notBefore

Timing Side-Channel in PSK Binder Verification

Session Cache Restore — Arbitrary Free via Deserialized Pointer