torproject/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-12-06 19:41:15 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge branch 'curve25519-donna32' into maint-0.2.4

Browse Source
This commit is contained in:
Nick Mathewson
2014-07-23 21:28:18 -04:00
parent 75501dbe4a ad0cf550b7
commit 303d7f55d9
2 changed files with 228 additions and 76 deletions
Download Patch File Download Diff File Expand all files Collapse all files
changes/curve25519-donna32-bug
+12
View File
@@ -0,0 +1,12 @@
o Major bugfixes:
- Fix a bug in the bounds-checking in the 32-bit curve25519-donna
implementation that caused incorrect results on 32-bit
implementations when certain malformed inputs were used along with
a small class of private ntor keys. This bug does not currently
appear to allow an attacker to learn private keys or impersonate a
Tor server, but it could provide a means to distinguish 32-bit Tor
implementations from 64-bit Tor implementations. Fixes bug 12694;
bugfix on 0.2.4.8-alpha. Bug found by Robert Ransom; fix from
Adam Langley.