CVE-2015-0837
CVE-2015-0837
In short
A timing vulnerability in the mpi_powm function allows attackers to infer sensitive cryptographic keys by measuring how long certain operations take. This side-channel attack exploits differences in CPU cache access patterns during encryption operations.
Technical detail
The mpi_powm function in Libgcrypt <1.6.3 and GnuPG <1.4.19 is vulnerable to a Last-Level Cache (LLC) side-channel attack during modular exponentiation. An attacker with local access to measure memory access timings can infer private key bits through cache hit/miss patterns when accessing pre-computed lookup tables. The vulnerability affects RSA and other operations relying on this function.
Summary generated and translated by AI from the official description.
The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a "Last-Level Cache Side-Channel Attack."
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →