CVE-2019-10764

Name of the Vulnerable Software and Affected Versions elliptic-php versions prior to 1.0.6

Description The issue allows for potential timing attacks, which under certain conditions, could lead to the practical recovery of the long-term private key generated by the library. This is due to the possible leakage of a bit-length of the scalar during scalar multiplication on an elliptic curve.

Recommendations For versions prior to 1.0.6, update to version 1.0.6 or later to resolve the issue.