The TLS 1.3 pre-shared key (PSK) binder verification in wolfSSL contained a timing side‑channel: a non‑constant‑time comparison allowed tiny timing differences during binder verification that could, in theory, leak information about a PSK binder. The issue was assigned CVE‑2025‑11932, publicly...