CVE-2026-3580 wolfSSL ECC密钥泄露漏洞

/* * PoC Concept for CVE-2026-3580 * This demonstrates the code pattern that leads to the vulnerability. * Compile with GCC for RISC-V with -O3 to observe the bnez instruction. */ #include <stdint.h> // Simulating the vulnerable logic in sp_256_get_entry_256_9 // Ideally should be constant time, but may become branching. void vulnerable_masking(uint32_t secret, uint32_t* result) { // Masking logic to prevent side-channel uint32_t mask = (int32_t)(secret - 1) >> 31; // Creates mask based on secret *result = (mask & 0xDEADBEEF) | (~mask & 0xCAFEBABE); } int main() { uint32_t secret_input = 0; uint32_t output = 0; // In a real attack, the attacker would vary secret_input and measure time for(int i=0; i<1000; i++) { vulnerable_masking(i, &output); } return 0; } /* * Compilation command that triggers the vulnerability: * riscv64-unknown-elf-gcc -O3 -march=rv32i -mabi=ilp32 -c poc.c -S -o poc.s * Check poc.s for 'bnez' instructions inside the masking logic. */