CVE-2022-48251

Summary

The AES instructions on the ARMv8 platform do not have an algorithm that is "intrinsically resistant" to side-channel attacks. NOTE: the vendor reportedly offers the position "while power side channel attacks … are possible, they are not directly caused by or related to the Arm architecture."

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://eshard.com/posts/sca-attacks-on-armv8
• https://eprint.iacr.org/2022/230

References

• https://eshard.com/posts/sca-attacks-on-armv8
• https://eprint.iacr.org/2022/230

• ←Previous
• Next→