From debbugs-submit-bounces@debbugs.gnu.org Thu Jun 14 16:44:16 2018 Received: (at 31831) by debbugs.gnu.org; 14 Jun 2018 20:44:16 +0000 Received: from localhost ([127.0.0.1]:48551 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1fTZ6N-0003WP-Ua for submit@debbugs.gnu.org; Thu, 14 Jun 2018 16:44:16 -0400 Received: from mail-it0-f51.google.com ([209.85.214.51]:39755) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1fTZ6M-0003WC-Ez for 31831@debbugs.gnu.org; Thu, 14 Jun 2018 16:44:14 -0400 Received: by mail-it0-f51.google.com with SMTP id p185-v6so121914itp.4 for <31831@debbugs.gnu.org>; Thu, 14 Jun 2018 13:44:14 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=bQNTApQoh2D4m2Tz6927FYXqw1v095NqfsZpVPSbSe8=; b=vRXWhmB4avxrrB8t6aoA2kHWDo+CavrGn9UNAd2HVGr6P/8moV76+XRpoXc+uCeTwl erjyu8oU0rFVDt7Y8NM3riAgZ6uwG7W6vfWWR3DgIa5NANeXPRccW4l5PPrhKyiw/jKL 8J5xBpf910jDWLVzBN+LPIGoI7nXzdmURHxyGNw/LTbA8vL487sqqBcnH9wcLIYHTtAW 82455tFKvjIC6zqesb3TLmlvNgCfAwlUArp/iSVOvxqVwpImWh55AwFLwWMKLr+At+nx bzxSRU0IHrdxfeKBs9NAkvbxB3pIux8vDMFbapvAiH+klLLPDYSIxwcY7Scp/vYMbrAv 8M1A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=bQNTApQoh2D4m2Tz6927FYXqw1v095NqfsZpVPSbSe8=; b=ci7+Mc4JUv8F3gmn5UMUyYmcsHObDrk5CMPRVcZveDcMFyGbi6mlCN5qzAumGswUP3 kx8v4GYaZkT6echQLxWJqTMZG/T73Nsc3ru1AKzJv07RFtwp4xt4xDfRKosj3unlCasg 0DEFfNFH4w94gcfY1yWS5dwff/IftyeOb/ap+JJkkB7q4Z9QaBjs9cgoMK3MHMON5Lxt aICxuwglLq/qS8CBUdalRvbT+iCMP/LmyAez86kAgR7ytystQGMThiClL7Qcjc95EWyl g7LW1P8O/6CCI/QZDl+nzAwRHkWUHM6zQqDtOoFFhhBQ2+fXuM2X3Blsok0D4wi2CTAU YoAw== X-Gm-Message-State: APt69E0V1ikUGyG4YJiemDfzcct/gK6ZR/k2h3ZvlQjZKSvmT5c86C0M QgPD1ipUwitfO3pjuowPg5LgvrZea195WlXVYQ== X-Google-Smtp-Source: ADUXVKLbhP91Xf6NKZOpIkHqcipWXsZ3oV1SIipIp8e9MOTtQu42m60L0mqMMEK3BExU8izhEAn2ytxGyO/FxYIqkf8= X-Received: by 2002:a24:be85:: with SMTP id i127-v6mr3583928itf.131.1529009048948; Thu, 14 Jun 2018 13:44:08 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:a4f:a84d:0:0:0:0:0 with HTTP; Thu, 14 Jun 2018 13:44:08 -0700 (PDT) In-Reply-To: References: <20180614192211.GA21522@jasmine.lan> <20180614195049.GB4039@jasmine.lan> From: =?UTF-8?Q?G=C3=A1bor_Boskovits?= Date: Thu, 14 Jun 2018 22:44:08 +0200 Message-ID: Subject: Re: bug#31831: CVE-2018-0495 Key Extraction Side Channel in Multiple Crypto Libraries To: Leo Famulari Content-Type: multipart/alternative; boundary="00000000000038951f056ea02981" X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 31831 Cc: 31831@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) --00000000000038951f056ea02981 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable 2018-06-14 21:53 GMT+02:00 G=C3=A1bor Boskovits : > 2018-06-14 21:50 GMT+02:00 Leo Famulari : > >> I see that Efraim already updated libgcrypt. Awesome, thanks Efraim! >> >> I'll try OpenSSL next. >> > > I'll try libressl. > Here it is: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D31832 --00000000000038951f056ea02981 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
2018= -06-14 21:53 GMT+02:00 G=C3=A1bor Boskovits <boskovits@gmail.com&g= t;:
2018-06-14 21:50 GMT+02:00 Leo Famulari <leo@famulari.name>= :
I see that Ef= raim already updated libgcrypt. Awesome, thanks Efraim!

I'll try OpenSSL next.

I'll try= libressl.
Here it is:=C2=A0https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D= 31832
--00000000000038951f056ea02981--