diff options
| author | Nick Mathewson <nickm@torproject.org> | 2014-07-23 21:28:18 -0400 |
|---|---|---|
| committer | Nick Mathewson <nickm@torproject.org> | 2014-07-23 21:28:18 -0400 |
| commit | 303d7f55d9ec8c7dbd9784171cf4df97cc5d7eef (patch) | |
| tree | 7c2d3dff8bf90f4e6e8fe2042b4233ba21d21fda /changes | |
| parent | 75501dbe4a70914ec8f19689849d3539d87be271 (diff) | |
| parent | ad0cf550b727587337d2aed741923d3781bb334f (diff) | |
| download | tor-303d7f55d9ec8c7dbd9784171cf4df97cc5d7eef.tar.gz tor-303d7f55d9ec8c7dbd9784171cf4df97cc5d7eef.zip | |
Merge branch 'curve25519-donna32' into maint-0.2.4
Diffstat (limited to 'changes')
| -rw-r--r-- | changes/curve25519-donna32-bug | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/changes/curve25519-donna32-bug b/changes/curve25519-donna32-bug new file mode 100644 index 0000000000..7fccab1b0c --- /dev/null +++ b/changes/curve25519-donna32-bug @@ -0,0 +1,12 @@ + o Major bugfixes: + + - Fix a bug in the bounds-checking in the 32-bit curve25519-donna + implementation that caused incorrect results on 32-bit + implementations when certain malformed inputs were used along with + a small class of private ntor keys. This bug does not currently + appear to allow an attacker to learn private keys or impersonate a + Tor server, but it could provide a means to distinguish 32-bit Tor + implementations from 64-bit Tor implementations. Fixes bug 12694; + bugfix on 0.2.4.8-alpha. Bug found by Robert Ransom; fix from + Adam Langley. + |