cve/2017/CVE-2017-0379.md

### [CVE-2017-0379](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0379)
![](https://img.shields.io/static/v1?label=Product&message=libgcrypt&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=local%20side-channel%20attack&color=brighgreen)

### Description

Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c.

### POC

#### Reference
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
- https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html

#### Github
No PoCs found on GitHub currently.