3 ms·
From section 9. Countermeasures > Libgcrypt 1.6.3 update: Libgcrypt recently patched this vulnerability by mak- ing the sliding window multiplication table acc
by niftich 10y ago
From section 9. Countermeasures
> Libgcrypt 1.6.3 update:
Libgcrypt recently patched this vulnerability by mak-
ing the sliding window multiplication table accesses indistinguishable from each
other. Thus, an update to the latest version of the library avoids the leakage ex-
ploited in this work albeit only for ciphers using sliding window exponentiation.
So it's already patched, assuming you patch (they say 55% of the hosts in their AWS region hasn't been patched in a year).
Nonetheless, there's novel work and interesting insights in the paper, and it's a short read.