Pycrypto is not used to implement anything security-relevant. It is safe to ignore the warning.
On Monday, August 11, 2014 12:50:59 PM UTC+1, Daniel Krenn wrote: > > Am 2014-02-27 um 01:07 schrieb Andrey Novoseltsev: > > When I try to start a notebook from 6.1.1, I get > > > > sage-6.1.1/local/lib/python2.7/site-packages/Crypto/Util/number.py:57: > > PowmInsecureWarning: Not using mpz_powm_sec. You should rebuild using > > libgmp >= 5 to avoid timing attack vulnerability. > > FYI, still there in 6.3: > > ┌────────────────────────────────────────────────────────────────────┐ > │ Sage Version 6.3, Release Date: 2014-08-10 │ > │ Type "notebook()" for the browser-based notebook interface. │ > │ Type "help()" for help. │ > └────────────────────────────────────────────────────────────────────┘ > > Please wait while the Sage Notebook server starts... > The notebook files are stored in: sage_notebook.sagenb > ┌────────────────────────────────────────────────┐ > │ │ > │ Open your web browser to http://localhost:8080 │ > │ │ > └────────────────────────────────────────────────┘ > Executing twistd --pidfile="sage_notebook.sagenb/sagenb.pid" -ny > "sage_notebook.sagenb/twistedconf.tac" > /usr/opt/Sage-6.3-amd64/local/lib/python2.7/site-packages/Crypto/Util/number.py:57: > > > PowmInsecureWarning: Not using mpz_powm_sec. You should rebuild using > libgmp >= 5 to avoid timing attack vulnerability. > _warn("Not using mpz_powm_sec. You should rebuild using libgmp >= 5 > to avoid timing attack vulnerability.", PowmInsecureWarning) > 2014-08-11 13:46:59+0200 [-] Log opened. > 2014-08-11 13:46:59+0200 [-] twistd 13.2.0 > (/usr/opt/Sage-6.3-amd64/local/bin/python 2.7.8) starting up. > 2014-08-11 13:46:59+0200 [-] reactor class: > twisted.internet.epollreactor.EPollReactor. > 2014-08-11 13:46:59+0200 [-] QuietSite starting on 8080 > 2014-08-11 13:46:59+0200 [-] Starting factory <__builtin__.QuietSite > instance at 0x7f3ca6380638> > > -- You received this message because you are subscribed to the Google Groups "sage-devel" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/sage-devel. For more options, visit https://groups.google.com/d/optout.
