Offline password cracking acceleration via EAP-PWD side channel

Information disclosure in FreeRADIUS Server's EAP-PWD module allows attackers to narrow an offline password dictionary through side-channel data. The compute_password_element function uses password-dependent branches and loop termination while mapping a password to an elliptic-curve point, exposing the successful iteration through timing or cache behavior. EAP-PWD must be enabled, and exploitation requires timing measurements or co-resident cache observation; the leak narrows password guesses without directly revealing the password.