CVE-2020-11713: 
NixOS vulnerability analysis and mitigation

wolfSSL 4.3.0 contains a timing side-channel vulnerability in the mulmod code implementation within the wc_ecc_mulmod_ex function in ecc.c. The vulnerability was discovered and disclosed in April 2020, affecting the cryptographic operations in wolfSSL version 4.3.0 (NVD, CVE).

The vulnerability exists in the mulmod code implementation which does not properly resist timing side-channel attacks. The issue has been assigned a CVSS v3.1 Base Score of 7.5 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, indicating a high-severity vulnerability with network accessibility and no required privileges or user interaction (NVD).

The vulnerability could allow attackers to perform timing side-channel attacks against the ECC implementation, potentially leading to the recovery of private keys used in cryptographic operations. This compromises the confidentiality of encrypted communications (NVD).

The vulnerability was addressed through a patch that implements constant-time and cache-resistant ECC mulmod operations. Users should upgrade to a version of wolfSSL that includes this fix (WolfSSL PR).