GrepRules
Sign inPublish rule
Explore/cve-2026-22705-lattice-crypto-variable-time-division

CVE-2026-22705: Lattice Crypto Variable Time Division

Variable-time operations like division (`/`, `/=`, `%`, `%=`) or `step_by` were detected inside timing-sensitive lattice cryptographic algorithms. Hardware division executes in variable time depending on the data, creating timing side-channels that can leak authentication secrets or key material. Use constant-time division alternatives (such as Barrett reduc

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Rustβ
greprules fetch cve-2026-22705-lattice-crypto-variable-time-division --engine opengrep

Description

Variable-time operations like division (`/`, `/=`, `%`, `%=`) or `step_by` were detected inside timing-sensitive lattice cryptographic algorithms. Hardware division executes in variable time depending on the data, creating timing side-channels that can leak authentication secrets or key material. Use constant-time division alternatives (such as Barrett reduc

License
Apache-2.0
Source context
Public repository
Source
Provally CVE rule catalog
Validation status
Verified
Quality signals
145 downloads0 direct145 via packs
· 0 stars · Quality score 78How quality works
Included packs
2 packs