wolfSSL 5.8.4 on RISC-V RV32I architectures lacks a constant-time software implementation for 64-bit multiplication. The compiler-inserted muldi3 subroutine executes in variable time based on operand values. This affects multiple SP math functions (sp 256 mul 9, sp 256 sqr 9, etc.), leading to a timing side-channel that may expose sensitive cryptographic data.