wolfSSL wolfCrypt Protection Mechanism Failure in Post-Quantum Implementations on ARM Cortex-M Microcontrollers

A protection mechanism failure has been identified in wolfSSL's wolfCrypt library, specifically in the post-quantum implementations of ML-KEM and ML-DSA, on ARM Cortex-M microcontrollers. This vulnerability allows a physical attacker to compromise key material and cryptographic outcomes by inducing transient faults that corrupt or redirect seed and pointer values during the Keccak-based expansion process. The issue is present in wolfSSL commit d86575c766e6e67ef93545fa69c04d6eb49400c6.

Impact

Exploitation of this vulnerability could lead to the compromise of cryptographic keys and the integrity of cryptographic operations, allowing for potential unauthorized access or manipulation of data.

Remediation

Users are advised to update to the latest version of wolfSSL, where this vulnerability has been addressed.