Security of OpenSSL ECDSA signatures
Aris Adamantiadis
aris at 0xbadc0de.be
Mon May 23 22:34:48 EST 2011
Le 23/05/11 14:31, Damien Miller a écrit :
> This result concerns binary/GF(2m) fields only and not the prime fields
> that OpenSSH uses in recent versions.
>
> Unless a similar timing oracle is found for GF(p) fields then no
> OpenSSH-side workaround is required.
Thanks for your explanation, I'm not familiar enough with ECC.
Regards,
Aris
More information about the openssh-unix-dev
mailing list