GnuPG Crypto Library libgcrypt Cracked Via Side-Channel
Patches have already been released so update your Linux servers ASAP, even though honestly it seems like a fairly theoretical attack (this side-channel attack requires that the attacker can run arbitrary software on the hardware where the private RSA key is used) it’s been treated as critical so upgrades are highly recommended.
However, on boxes with virtual machines this attack may be used by oneVM to steal private keys from another VM – which is very common and makes this significantly higher risk.
For more downloading tools click on the below link...
No comments:
Post a Comment