The curve25519-dalek crate before 4.1.3 for Rust has a constant-time operation on elliptic curve scalars that is removed by LLVM.
The developer builds a security-critical protection mechanism into the software, but the compiler optimizes the program such that the mechanism is removed or modified.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Curve25519-dalek | Dalek | * | 4.1.3 (excluding) |
| Rust-curve25519-dalek | Ubuntu | upstream | * |