[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID:
<ME0P300MB071388168EE3469B38446156EEEBA@ME0P300MB0713.AUSP300.PROD.OUTLOOK.COM>
Date: Tue, 14 Oct 2025 14:33:26 +0000
From: Peter Gutmann <pgut001@...auckland.ac.nz>
To: "oss-security@...ts.openwall.com" <oss-security@...ts.openwall.com>
Subject: Re: BoringSSL private key loading is not constant time
Alex Gaynor <alex.gaynor@...il.com> writes:
>But it seems to me any claim like "there are no timing side-channels" has to
>have an implicit "relevant to a threat model".
In which case it would probably have been good to explicitly say that, because
otherwise it's a "challenge accepted" statement. The talk was fun, and this
wasn't presented as a serious attack but as a challenge-accepted one.
Peter.
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
