Live › vulnerability › CVE-2026-5598
Bouncy Castle's Java FrodoKEM implementation leaks timing information during decryption of encapsulations. An attacker who can time many decryptions may recover information about the secret key.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-04 03:21 UTC, 0h before NVD. All times on this page are UTC.
Only applications that use the FrodoKEM algorithm to decrypt encapsulations with Bouncy Castle's Java library are affected. Applications that use other algorithms, or that do not use FrodoKEM decryption, are not affected by the sources' description.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| org.bouncycastle:bcprov-jdk15to18 | maven | >= 1.71, < 1.80.2 | 1.80.2 |
| org.bouncycastle:bcprov-jdk18on | maven | >= 1.82, < 1.84 | 1.84 |
| org.bouncycastle:bcprov-jdk14 | maven | >= 1.71, < 1.84 | 1.84 |
| org.bouncycastle:bcprov-jdk18on | maven | >= 1.81, < 1.81.1 | 1.84 |
| org.bouncycastle:bcprov-jdk18on | maven | >= 1.71, < 1.80.2 | 1.80.2 |
mvn dependency:tree | grep bouncycastlebcprov-jdk15to18 to 1.80.2bcprov-jdk18on to 1.80.2 for the 1.71 to 1.80.1 range, 1.84 for the 1.81 and 1.82 to 1.83 rangesbcprov-jdk14 to 1.84Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Covert timing channel vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA core on all (core modules). This vulnerability is associated with program files FrodoEngine.Java.
This issue only affects users of the FrodoKEM algorithm involved in the decryption of encapsulations.
This issue affects BC-JAVA: from 1.71 to 1.80.1, 1.81, 1.82 to 1.83.
Fixed versions: 1.80.2, 1.81.1, 1.84
This page as .md · .json · in your agent: get_signal("CVE-2026-5598")
GitHub Advisory Database, CC-BY 4.0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.