Re: Re: CVE Request: nettle's RSA code is vulnerable to cache sharing related attacks

[Huzaifa Sidhpurwala <huzaifas () redhat com>]

On 07/29/2016 10:33 PM, cve-assign () mitre org wrote:
> > The following whitepaper talks about libgcrypt's RSA code being
> > vulnerable to a cache timing attack, which the paper claims is fixed in
> > 1.6.3.
>
> As far as we can tell, your message did not provide a link to a
> whitepaper, and any attachment did not arrive either through direct
> email or in any of the oss-security list archives.

Here is the paper i am referring to:

https://eprint.iacr.org/2016/596.pdf


-- 
Huzaifa Sidhpurwala / Red Hat Product Security Team