Re: Hyper-Threading Vulnerability

From: Paul Jakma
Date: Fri May 13 2005 - 18:43:27 EST


On Fri, 13 May 2005, Andi Kleen wrote:

No, i strongly disagree on that. The reasonable thing to do is to fix the crypto code which has this vulnerability, not break a useful performance enhancement for everybody else.

Already done:

http://www.openssl.org/news/secadv_20030317.txt

This is old news it seems, a timing attack that has long been known about and fixed.

regards,
--
Paul Jakma paul@xxxxxxxx paul@xxxxxxxxx Key ID: 64A2FF6A
Fortune:
What happens when you cut back the jungle? It recedes.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/