Thierry Zoller <[email protected]> wrote: > According to a Bugzilla entry memory is also leaked during the process. > > So let's recap, we have a function that generates key material and looping > causes memory to leak. One might think this should be important enough to > investigate, especially if you know that for DSA for instance, only a few > bits of k can reveal an entire private key. [3] > > Note: I am not saying the memory leaks include key material, seeing the > lack of interest this bugzilla ticket triggered, I have not considered > investigating further. What I am saying is that if security is taken > seriously memory leaks that directly or indirectly happen during key > generation need to be investigated thoroughly. >
I suspect there may be a language issue here, you seem to be confusing the terms "information leak" and "memory leak", they're entirely unrelated concepts despite the similar name. Thanks, Tavis. -- ------------------------------------- [email protected] | finger me for my pgp key. ------------------------------------------------------- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
