ECDSA/EC/Point.pm in Crypt::Perl before 0.33 does not properly consider timing attacks against the EC point multiplication algorithm.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17478
Reference (s):
- https://github.com/FGasper/p5-Crypt-Perl/compare/0.32 0.33