Mbed-TLS/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-09-12 05:09:57 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add Changelog for the Marvin attack fix

Browse Source 
Signed-off-by: Janos Follath <[email protected]>
This commit is contained in:
Janos Follath
2024-01-22 15:58:57 +00:00
committed by Dave Rodgman
parent eaeff5b75a
commit f10bfbbe74
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ChangeLog.d/fix-Marvin-attack.txt
+6
View File
@@ -0,0 +1,6 @@
Security
* Fix a timing side channel in RSA private operations. This side channel
could be sufficient for a local attacker to recover the plaintext. It
requires the attacker to send a large number of messages for decryption.
For details, see "Everlasting ROBOT: the Marvin Attack", Hubert Kario.
Reported by Hubert Kario, Red Hat.