oss-security - CVE request: GnuPG side-channel attack on RSA secret keys

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <d7b0b0f38b856835a6e273fb56e9c2ae.squirrel@aphrodite.kinkhorst.nl>
Date: Thu, 25 Jul 2013 13:38:44 +0200
From: "Thijs Kinkhorst" <thijs@...ian.org>
To: "Open Source Security" <oss-security@...ts.openwall.com>
Subject: CVE request: GnuPG side-channel attack on RSA secret keys

Hi list,

I'd like to request a CVE name for the side channel attack described in
attached release announcements of GnuPG and Libgrypt.


Thanks,
Thijs
Download attachment "[Announce] [security fix] GnuPG
 1.4.14 released.eml" of type "message/rfc822" (12532 bytes)

Download attachment "[Announce] [security fix]
 Libgcrypt 1.5.3 released.eml" of type "message/rfc822" (6966 bytes)

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.