Minerva attack side channels on OpenSSL

George Pantelakis <[email protected]>
Newsgroups gmane.comp.encryption.openssl.user
Message-ID <CACAHbhGEfg4SK6CMu0CkKJcwLmnTED=sYm3EN8-PZE8U4vP+Kg@mail.gmail.com>
Hello openssl-users,

My team and I have identified some Minerva attack[1] side channels in
various architectures. We are using statistical analysis to identify such
side channels. For each architecture we have tested and found out, it is
vulnerable we have created an upstream issue ( Intel[2], s390x[3],  power
PC[4],  ARM[5] ). If you want to test another architecture, we have created
a toolkit[6] that you can use to perform the statistical tests easily.

*Sincerely,*
*George Pantelakis*

1 - https://minerva.crocs.fi.muni.cz/
2 - https://github.com/openssl/openssl/issues/23860/
3 - https://github.com/openssl/openssl/issues/24252/
4 - https://github.com/openssl/openssl/issues/24253/
5 - https://github.com/openssl/openssl/issues/24254/
6 - https://github.com/GeorgePantelakis/minerva-toolkit/
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.