OpenSSL Information for VU#536044
OpenSSL leaks ECDSA private key through a remote timing attack
- Vendor Information Help Date Notified: 29 Mar 2011
- Statement Date:
- Date Updated: 11 May 2011
"The OpenSSL team have reviewed the paper, and although the result is significant, we believe that the affected code (ECDSA used with binary curves) is very rarely used at present. We therefore do not plan on issuing a security release but expect to patch this in the future."
We are not aware of further vendor information regarding this vulnerability.
There are no additional comments at this time.
If you have feedback, comments, or additional information about this vulnerability, please send us email.