[gnutls-dev] gnutls 0.3.5

Nikos Mavroyanopoulos nmav at hellug.gr
Fri Jan 25 15:50:01 CET 2002

I've just released gnutls 0.3.5. It seems that some debugging
code has escaped and allowed some attacks against RSA private
keys. You must update if you're using gnutls with a private

- Corrected the RSA key exchange method, to avoid attacks against
  PKCS-1 formating.

Nikos Mavroyanopoulos
mailto:nmav at hellug.gr

More information about the Gnutls-devel mailing list