This is the mail archive of the
glibc-bugs@sourceware.org
mailing list for the glibc project.
[Bug crypt/22781] New: Cache Side Channel in /sunrpc/des_impl.c
- From: "rbrot249 at gmail dot com" <sourceware-bugzilla at sourceware dot org>
- To: glibc-bugs at sourceware dot org
- Date: Sat, 03 Feb 2018 18:50:49 +0000
- Subject: [Bug crypt/22781] New: Cache Side Channel in /sunrpc/des_impl.c
- Auto-submitted: auto-generated
https://sourceware.org/bugzilla/show_bug.cgi?id=22781
Bug ID: 22781
Summary: Cache Side Channel in /sunrpc/des_impl.c
Product: glibc
Version: 2.26
Status: UNCONFIRMED
Severity: normal
Priority: P2
Component: crypt
Assignee: unassigned at sourceware dot org
Reporter: rbrot249 at gmail dot com
Target Milestone: ---
The DES implementation in this file does not do any preloading or some other
defense (as far as I can see) to prevent someone from observing cache
hits/misses caused by key dependent memory accesses to the precomputed tables.
--
You are receiving this mail because:
You are on the CC list for the bug.