Constant-Time Operation Vulnerability in curve25519-dalek for Rust by Dalek Cryptography

CVE-2024-58262

What is CVE-2024-58262?

The curve25519-dalek crate for Rust prior to version 4.1.3 includes a vulnerability where a constant-time operation on elliptic curve scalars has been compromised by LLVM optimizations. This issue may expose applications utilizing this crate to timing attacks, potentially allowing attackers to gain sensitive information based on the execution time of operations. Developers using this library should upgrade to the latest version to ensure the integrity and security of their applications.

References