74bfe85d5c
In libgcrypt before 1.7.7, an attacker who learns the EdDSA session key (from side-channel observation during the signing process) can easily recover the long-term secret key. 1.7.7 makes a cipher/ecc-eddsa.c change to store this session key in secure memory, to ensure that constant-time point operations are used in the MPI library. (From OE-Core rev: 6039dbfd981830b5406c25a27ccfae0e5ed016e8) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |
||
|---|---|---|
| .. | ||
| 0001-ecc-Store-EdDSA-session-key-in-secure-memory.patch | ||
| add-pkgconfig-support.patch | ||
| fix-ICE-failure-on-mips-with-option-O-and-g.patch | ||
| fix-undefined-reference-to-pthread.patch | ||
| libgcrypt-fix-building-error-with-O2-in-sysroot-path.patch | ||