Reporting timing issues

classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

Reporting timing issues

Henrik Palmér
Dear all,

I apologise if this is the wrong forum for this question, but I could not find a more suitable address to report to on your site.

I found a possible issue relating to timing attacks in Bouncy Castle 1.61. It is relatively minor---one might even say the issue is only with the documentation---but I would still like to go through the correct channel for reporting. I found [hidden email], but it appears to have a focus on commercial support.

Best regards,
Henrik Palmér,
TrueSec
Reply | Threaded
Open this post in threaded view
|

Re: Reporting timing issues

David Hook-3
Hi Henrik,


Is the correct address to use. Always happy to hear reports, history has suggest that minor issues have a habit of been minor until someone works out how to really make use of one. It's good to get to everything as early as we can.

Regards,

David

On 23/4/19 7:31 pm, Henrik Palmér wrote:
Dear all,

I apologise if this is the wrong forum for this question, but I could not find a more suitable address to report to on your site.

I found a possible issue relating to timing attacks in Bouncy Castle 1.61. It is relatively minor---one might even say the issue is only with the documentation---but I would still like to go through the correct channel for reporting. I found [hidden email], but it appears to have a focus on commercial support.

Best regards,
Henrik Palmér,
TrueSec