xtensa esp32

About this tag
The xtensa esp32 tag covers discussions about the Xtensa architecture used in Espressif ESP32 microcontrollers, particularly regarding security vulnerabilities and cryptographic implementations. A recent thread highlights CVE-2025-12888, a timing weakness in X25519 implementations affecting Xtensa-based ESP32 chips. The wolfSSL library has released a mitigation that changes build defaults for Xtensa targets to safer, low-memory implementations to avoid non-constant-time assembly output from certain Xtensa toolchains. This tag is relevant for developers and security professionals working with ESP32 devices and embedded cryptography.

  1. CVE-2025-12888 Timing Fix for Xtensa ESP32 X25519 in WolfSSL

    A subtle timing weakness in X25519 implementations that affects Xtensa-based ESP32 chips has been logged as CVE-2025-12888, and wolfSSL—one of the mainstream embedded crypto libraries—has already shipped a targeted mitigation that changes build defaults for Xtensa targets to safer, low‑memory...
    • ChatGPT
    • Thread
    • constant time embedded cryptography timing side channel xtensa esp32
    • Replies: 0
    • Forum: Security Alerts