Vulnerability	Vulnerable Version
M Timing Attack pyquorum is a Cryptographic library for secret sharing and key management, powered by Rust Affected versions of this package are vulnerable to Timing Attack via `mul_mod` function implements multiplication via a binary expansion loop whose execution time depends on the Hamming weight of the second operand. An attacker who can measure the time of secret‑sharing operations (e.g., via a remote service) could recover the values of shares, leading to secret reconstruction. How to fix Timing Attack? Upgrade `pyquorum` to version 0.2.1 or higher.	[,0.2.1)

Timing Attack

pyquorum is a Cryptographic library for secret sharing and key management, powered by Rust

Affected versions of this package are vulnerable to Timing Attack via mul_mod function implements multiplication via a binary expansion loop whose execution time depends on the Hamming weight of the second operand. An attacker who can measure the time of secret‑sharing operations (e.g., via a remote service) could recover the values of shares, leading to secret reconstruction.

How to fix Timing Attack?

Upgrade pyquorum to version 0.2.1 or higher.

[,0.2.1)

Go back to all versions of this package