4 ms·
Its good users were notified to upgrade, but I am surprised he revealed as many details this soon. Does that not further reduce security for the end user for d
by mooneater 16y ago
Its good users were notified to upgrade, but I am surprised he revealed as many details this soon. Does that not further reduce security for the end user for data they have stored with the old version?
- JoachimSchipper 16y agoIt's not like running diff against both versions wouldn't pinpoint the problem anyway.
- cperciva 16y agoI did consider that, but the NSA knows perfectly well how to attack CTR nonce collisions, and anyone looking at the diff between version 1.0.27 and version 1.0.28 can see what the change was; so I didn't disclose anything which potential attackers couldn't already figure out easily.