Opened 7 years ago

Closed 7 years ago

#9685 closed enhancement (fixed)

libgcrypt-1.8.1

Reported by: bdubbs@… Owned by: Pierre Labastie
Priority: normal Milestone: 8.2
Component: BOOK Version: SVN
Severity: normal Keywords:
Cc:

Description

New point version.

Change History (3)

comment:1 by Pierre Labastie, 7 years ago

Owner: changed from blfs-book@… to Pierre Labastie
Status: new → assigned

comment:2 by Pierre Labastie, 7 years ago 

Noteworthy changes in version 1.8.1 (2017-08-27)
================================================

   - Mitigate a local side-channel attack on Curve25519 dubbed "May
     the Fourth be With You".  [CVE-2017-0379]

   - Add more extra bytes to the pool after reading a seed file.

   - Add the OID SHA384WithECDSA from RFC-7427 to SHA-384.

   - Fix build problems with the Jitter RNG

   - Fix assembler code build problems on Rasbian (ARMv8/AArch32-CE).

For the mathematically incluned, here is the vulnerability: ​https://eprint.iacr.org/2017/806.pdf

comment:3 by Pierre Labastie, 7 years ago

Resolution: → fixed
Status: assigned → closed

Fixed at r19182

Note: See TracTickets for help on using tickets.