Re: [PATCH gnupg] Disable CPU speculation-related misfeatures

Werner Koch via Gnupg-devel <[email protected]> Mon, 26 May 2025 16:46:11 +0200

Newsgroups	gmane.comp.encryption.gpg.devel
Message-ID	<[email protected]>

Hi!

On Mon, 26 May 2025 14:00, Guido Trentalancia said:
> Disable CPU speculation-related misfeatures which are in
> fact vulnerabilities causing data leaks:

If that is a misfeature it needs to be fixed at the pläce where it was
introduced and not just in a single binary.  If this code is really
needed it would first of all be useful in Libgcrypt only then then you
should put it into gnupg/common/init.c:early_system_init.

Specific Linux code is in general not a good idea, if that is required,
please write a proper configure test for this feature and use a
dedicated macro.  A more detailed explanation of the pro and cons would
also be appreciated.



Shalom-Salam,

   Werner

-- 
The pioneers of a warless world are the youth that
refuse military service.             - A. Einstein

_______________________________________________
Gnupg-devel mailing list
[email protected]
https://lists.gnupg.org/mailman/listinfo/gnupg-devel

openpgp-digital-signature.asc (application/pgp-signature, 247 B)