Description

Bug fixes:
- Add mitigation against an ECDSA timing attack. [T4626,CVE-2019-13627]
- Improve ECDSA unblinding.
Other features:
- Provide a pkg-config file for libgcrypt.

Details

External Link: https://lists.gnupg.org/pipermail/gnupg-announce/2019q3/000440.html
Version: 1.8.5

		Status	Assigned	Task
		Resolved	• werner	T4684 Release GnuPG 2.2.18
		Resolved	None	T4683 Release Libgcrypt 1.8.5

• werner updated the task description. (Show Details)

• werner added a project: CVE.

• werner set External Link to https://lists.gnupg.org/pipermail/gnupg-announce/2019q3/000440.html.Aug 29 2019, 5:39 PM

See https://minerva.crocs.fi.muni.cz/ for a description of the timing attack.