File tree Expand file tree Collapse file tree 1 file changed +3
-2
lines changed Expand file tree Collapse file tree 1 file changed +3
-2
lines changed Original file line number Diff line number Diff line change @@ -115,13 +115,14 @@ Vulnerabilities addressed in this update:
115
115
116
116
* Fix a bias in the generation of finite-field Diffie-Hellman-Merkle (DHM)
117
117
private keys and of blinding values for DHM and elliptic curves (ECP)
118
- computations. Reported by FlorianF89 in #4245.
118
+ computations.
119
119
120
120
* Fix a potential side channel vulnerability in ECDSA ephemeral key generation.
121
121
An adversary who is capable of very precise timing measurements could
122
122
learn partial information about the leading bits of the nonce used for the
123
123
signature, allowing the recovery of the private key after observing a
124
- large number of signature o
124
+ large number of signature operations. This completes a partial fix in
125
+ Mbed TLS 2.20.0.
125
126
126
127
Security Vulnerability Related
127
128
******************************
You can’t perform that action at this time.
0 commit comments