mbedtls/ChangeLog.d/fix-Marvin-attack.txt

7 lines
354 B
Plaintext
Raw Normal View History

Security
* Fix a timing side channel in RSA private operations. This side channel
could be sufficient for a local attacker to recover the plaintext. It
requires the attacker to send a large number of messages for decryption.
For details, see "Everlasting ROBOT: the Marvin Attack", Hubert Kario.
Reported by Hubert Kario, Red Hat.