Commit message (Collapse) | Author | Files | Lines | ||
---|---|---|---|---|---|
2013-07-25 | Mitigate a flush+reload cache attack on RSA secret exponents. | Werner Koch | 1 | -3/+12 | |
* mpi/mpi-pow.c (mpi_powm): Always perform the mpi_mul for exponents hold in secure memory. -- The attack is described in a paper to be pusblished at eprint.iacr.org: Flush+Reload: a High Resolution, Low Noise, L3 Cache Side-Channel Attack by Yuval Yarom and Katrina Falkner. 18 July 2013. Flush+Reload is a cache side-channel attack that monitors access to data in shared pages. In this paper we demonstrate how to use the attack to extract private encryption keys from GnuPG. The high resolution and low noise of the Flush+Reload attack enables a spy program to recover over 98% of the bits of the private key in a single decryption or signing round. Unlike previous attacks, the attack targets the last level L3 cache. Consequently, the spy program and the victim do not need to share the execution core of the CPU. The attack is not limited to a traditional OS and can be used in a virtualised environment, where it can attack programs executing in a different VM. Signed-off-by: Werner Koch <[email protected]> | |||||
2011-08-09 | Removed some set but unused vars. | Werner Koch | 1 | -3/+2 | |
2007-10-23 | Switched to GPLv3. | Werner Koch | 1 | -4/+2 | |
Updated gettext. | |||||
2005-05-31 | Updated FSF street address and preparations for a release candidate. | Werner Koch | 1 | -1/+2 | |
2004-05-20 | * longlong.h: Typo. | David Shaw | 1 | -7/+8 | |
* mpi-pow.c (mpi_powm): s/exp/exponent/ to shutup a compiler warning. From Werner on stable branch. | |||||
2002-06-29 | Update head to match stable 1.0 | David Shaw | 1 | -0/+294 | |
2000-12-19 | Removed files from the HEAD revision, because they are now in another | Werner Koch | 1 | -295/+0 | |
repository | |||||
2000-07-17 | See ChangeLog: Mon Jul 17 16:35:47 CEST 2000 Werner Koch | Werner Koch | 1 | -4/+17 | |
1999-12-08 | See ChangeLog: Wed Dec 8 21:58:32 CET 1999 Werner Koch | Werner Koch | 1 | -2/+2 | |
1999-04-18 | See ChangeLog: Sun Apr 18 10:11:28 CEST 1999 Werner Koch | Werner Koch | 1 | -1/+2 | |
1998-12-23 | See ChangeLog: Wed Dec 23 13:34:22 CET 1998 Werner Koch | Werner Koch | 1 | -3/+3 | |
1998-06-16 | some more internall structure changes | Werner Koch | 1 | -4/+4 | |
1998-02-24 | Renamed to GNUPGV-0-2-8 | Werner Koch | 1 | -4/+4 | |
1998-01-16 | added some trust model stuff | Werner Koch | 1 | -1/+1 | |
1997-12-23 | changed configuration stuff, replaced some Makefile.am by distfiles. | Werner Koch | 1 | -1/+20 | |
1997-11-26 | changed the dir layout | Werner Koch | 1 | -7/+22 | |
1997-11-18 | initially checkin | Werner Koch | 1 | -0/+247 | |