cve/2020/CVE-2020-6829.md

### [CVE-2020-6829](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6829)
![](https://img.shields.io/static/v1?label=Product&message=Firefox%20for%20Android&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Firefox&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3C%2080%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=P-384%20and%20P-521%20vulnerable%20to%20an%20electro-magnetic%20side%20channel%20attack%20on%20signature%20generation&color=brighgreen)

### Description

When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used; which leaked partial information about the nonce used during signature generation. Given an electro-magnetic trace of a few signature generations, the private key could have been computed. This vulnerability affects Firefox < 80 and Firefox for Android < 80.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/ARPSyndicate/cvemon