[openssl-project] ECDSA blinding

2018-06-13 Thread Matt Caswell
FYI see commit a3e9d5aa98 (and equivalent commits in 1.1.0 and 1.0.2). These fixes were reviewed in private due to an embargo from the reporter. In spite of that we have chosen not to issue a CVE for these fixes since they are localhost side channels only. Matt __

[openssl-project] Monthly Status Report (May)

2018-06-13 Thread Richard Levitte
[appologies for the delay] Apart from normal business, such as normal reviews, OMC business, normal system administration tasks, etc., key activities this month: Development: - Attended the OMC f2f in Ottawa (remotely) - Started as contact with legal advisor - Adapted VMS random seeding to the n