CVE-2025-22866

Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec

Medium · published February 6, 2025

CVSS v3.1
4.0
EPSS
0%
Percentile
20.4
In the wild
Unconfirmed
What it is

Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the private key when P-256 is used in any well known protocols.

The record
Technical detail
CVSS v3.1
4.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00290 · 20.4th percentile
Published
2025-02-06T16:54Z
EPSS history
Timeline
  • 06 FEB 16:54Z
    Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec
    cvelistv5