[openssl/openssl] 7f9d9d: Document SM4 table-lookup side-channel risk
"'Filipe' via openssl-commits" <[email protected]>
| Newsgroups | gmane.comp.encryption.openssl.cvs |
|---|---|
| Message-ID | <openssl/openssl/push/refs/heads/openssl-3.6/[email protected]> |
Branch: refs/heads/openssl-3.6
Home: https://github.com/openssl/openssl
Commit: 7f9d9d35b945ce0d128b995368e55e4070be1362
https://github.com/openssl/openssl/commit/7f9d9d35b945ce0d128b995368e55e4070be1362
Author: Filipe <[email protected]>
Date: 2026-08-11 (Tue, 11 Aug 2026)
Changed paths:
M doc/man7/EVP_CIPHER-SM4.pod
Log Message:
-----------
Document SM4 table-lookup side-channel risk
Note in EVP_CIPHER-SM4(7) that SM4 implementations may use
secret-dependent table lookups and are not guaranteed to be
constant-time. Mention the portable C path as a concrete example
and point to CPU capability man pages for code-path selection.
Fixes: https://github.com/openssl/openssl/issues/31911
Assisted-by: Cursor:composer
Reviewed-by: Eugene Syromiatnikov <[email protected]>
Reviewed-by: Paul Yang <[email protected]>
MergeDate: Tue Aug 11 07:02:49 2026
(Merged from https://github.com/openssl/openssl/pull/32136)
To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications
--
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/openssl-3.6/13ed5c-7f9d9d%40github.com.