Re: Reporting timing issues

Hi Henrik,

/[email protected]/
/
/
/Is the correct address to use. Always happy to hear reports, history
has suggest that minor issues have a habit of been minor until someone
works out how to really make use of one. It's good to get to everything
as early as we can.
/
/
/
/Regards,/
/
/
/David
/

On 23/4/19 7:31 pm, Henrik Palmér wrote:
> Dear all,
>
> I apologise if this is the wrong forum for this question, but I could
> not find a more suitable address to report to on your site.
>
> I found a possible issue relating to timing attacks in Bouncy Castle
> 1.61. It is relatively minor---one might even say the issue is only
> with the documentation---but I would still like to go through the
> correct channel for reporting. I
> found /[email protected]/, but it appears to have a
> focus on commercial support.
>
> Best regards,
> Henrik Palmér,
> TrueSec