Skip to content

Commit 43370b8

Browse files
Christopher Friedtcfriedt
authored andcommitted
release: minor corrections to security release notes
* remove reference to other github project issue * complete incomplete sentence Signed-off-by: Christopher Friedt <[email protected]>
1 parent 15fa288 commit 43370b8

File tree

1 file changed

+3
-2
lines changed

1 file changed

+3
-2
lines changed

doc/releases/release-notes-2.7.rst

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -115,13 +115,14 @@ Vulnerabilities addressed in this update:
115115

116116
* Fix a bias in the generation of finite-field Diffie-Hellman-Merkle (DHM)
117117
private keys and of blinding values for DHM and elliptic curves (ECP)
118-
computations. Reported by FlorianF89 in #4245.
118+
computations.
119119

120120
* Fix a potential side channel vulnerability in ECDSA ephemeral key generation.
121121
An adversary who is capable of very precise timing measurements could
122122
learn partial information about the leading bits of the nonce used for the
123123
signature, allowing the recovery of the private key after observing a
124-
large number of signature o
124+
large number of signature operations. This completes a partial fix in
125+
Mbed TLS 2.20.0.
125126

126127
Security Vulnerability Related
127128
******************************

0 commit comments

Comments
 (0)