TI-2026-00950 CVE-2026-1229 · GHSA-q9hv-hpm4-hj6x
Incorrect calculation in CIRCL secp384r1 CombinedMult
Priority LOW 15
The CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs.
2 records
The CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs.
When sampling randomness for a shared secret, the implementation of Kyber and FrodoKEM, did not check whether crypto/rand.Read() returns an error.