CVE-2019-12904 and the next libgcrypt release.

[Werner Koch]

On Fri, 21 Jun 2019 20:08, gcrypt-devel at gnupg.org said:

> https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12904

See https://dev.gnupg.org/T4541 where I commented:

 Andreas, I wonder on which grounds you assigned a CVE for this claimed
 side-channel attack. The mentioned paper is about an old RSA
 side-channel and not on AES.  I would like to see more facts than the
 reference to a guy who "knows PPC pretty well".


Salam-Shalom,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <https://lists.gnupg.org/pipermail/gcrypt-devel/attachments/20190623/1a71040e/attachment.sig>