Cryptopp · Crypto++ · CVE-2016-3995
**Name of the Vulnerable Software and Affected Versions**
Crypto++ versions prior to 5.6.4
**Description**
The issue concerns the timing attack protection in the Rijndael encryption and decryption processes. Specifically, the `Rijndael::Enc::ProcessAndXorBlock` and `Rijndael::Dec::ProcessAndXorBlock` functions may have their timing attack protection optimized out by the compiler. This optimization could allow attackers to conduct timing attacks.
**Recommendations**
For versions prior to 5.6.4, update to version 5.6.4 or later to resolve the issue.