PT-2019-13455 · Matrixssl · Matrixssl

Keegan Ryan · Published 2019-10-03 · Updated 2021-07-21 · CVE-2019-13629

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions MatrixSSL versions 4.2.1 and earlier

Description The issue is a timing side channel in ECDSA signature generation, which allows a local or remote attacker to compute the private key used by measuring the duration of hundreds to thousands of signing operations. This occurs due to a leak of the bit length of the scalar in the scalar multiplication in crypto/pubkey/ecc math.c.

Recommendations For MatrixSSL versions 4.2.1 and earlier, consider disabling the ECDSA signature generation functionality until a patch is available to prevent exploitation of the timing side channel. Restrict access to the ecc math.c module to minimize the risk of exploitation. Avoid using the affected scalar multiplication function in the ECDSA signature generation process until the issue is resolved.

Fix

Use of a Broken Cryptographic Algorithm

Side Channel Attack

Weakness Enumeration

CWE-327

CWE-203

Related Identifiers

CVE-2019-13629

Affected Products

Matrixssl

References · 6

• https://osv.dev/vulnerability/CVE-2019-13629 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-13629 · Security Note
• http://openwall.com/lists/oss-security/2019/10/02/2 · Note
• https://minerva.crocs.fi.muni.cz · Note
• https://eprint.iacr.org/2011/232.pdf · Note
• https://tches.iacr.org/index.php/TCHES/article/view/7337 · Note