Reporting timing issues

Henrik Palmér <[email protected]> Tue, 23 Apr 2019 09:31:12 +0000
Newsgroups gmane.comp.encryption.bouncy-castle.devel
Message-ID <AM6P191MB03586B1F0D31E38F44C69AC39B230@AM6P191MB0358.EURP191.PROD.OUTLOOK.COM>
Dear all,

I apologise if this is the wrong forum for this question, but I could not find a more suitable address to report to on your site.

I found a possible issue relating to timing attacks in Bouncy Castle 1.61. It is relatively minor---one might even say the issue is only with the documentation---but I would still like to go through the correct channel for reporting. I found [email protected], but it appears to have a focus on commercial support.

Best regards,
Henrik Palmér,
TrueSec