During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar multiplication was removed, resulting in variable-time execution dependent on secret data. This vulnerability affects Firefox < 80 and Firefox for Android < 80.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mozilla
Published: 2020-10-08T00:00:00
Updated: 2024-08-04T11:56:51.648Z
Reserved: 2020-04-28T00:00:00
Link: CVE-2020-12401
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-10-08T14:15:11.250
Modified: 2024-11-21T04:59:38.763
Link: CVE-2020-12401
Redhat