A side channel information disclosure vulnerability exists in the bytes_are_equal function of lib.rs that may allow recovery of authentication keys. Exploitation requires no additional execution privileges or user interaction and results in local information disclosure.