wolfSSL Constant-Time Logic Vulnerability in ECC Scalar Multiplication on RISC-V RV32I

A vulnerability in wolfSSL version 5.8.4 allows for side-channel attacks on ECC scalar multiplication. The issue arises because constant-time masking logic is optimized into conditional branches by GCC when targeting RISC-V RV32I with optimization level 3. This transformation breaks the side-channel resistance, potentially enabling a local attacker to recover secret keys through timing analysis.

Impact

Exploitation of this vulnerability could lead to the recovery of secret keys via timing analysis, undermining the security of ECC operations.