← Back

The Bouncy Castle Crypto Package For Java

the_bouncy_castle_crypto_package_for_java

Vendor: Bouncycastle • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-15522
1Bouncycastle
4Bc Csharp
Bouncy Castle Fips .net ApiFips Java Api+1 more
Jul 17, 2025
May 20, 2021
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA before 1.0.1.2, 1.0.2.1, and BC-FNA before 1.0.1.1 have a timing issue within the EC math library that can expose information about the private key when...Show more
Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA before 1.0.1.2, 1.0.2.1, and BC-FNA before 1.0.1.1 have a timing issue within the EC math library that can expose information about the private key when an attacker is able to observe timing information for the generation of multiple deterministic ECDSA signatures.Show less