Re: Hyper-Threading Vulnerability

Paul Jakma
2005-05-13T23:34:54Z

On Fri, 13 May 2005, Andi Kleen wrote:

> No, i strongly disagree on that. The reasonable thing to do is to
> fix the crypto code which has this vulnerability, not break a
> useful performance enhancement for everybody else.

Already done:

http://www.openssl.org/news/secadv_20030317.txt

This is old news it seems, a timing attack that has long been known
about and fixed.

regards,
--
Paul Jakma paul@clubi.ie paul@jakma.org Key ID: 64A2FF6A
Fortune:
What happens when you cut back the jungle? It recedes.