Potential Side-channel in Cairo Graphics Library

--===============1946085925==
Content-Type: multipart/alternative; boundary="0000000000001447c2058237127b"

--0000000000001447c2058237127b
Content-Type: text/plain; charset="UTF-8"

Dear Cairo Development Team,

We're a group of researchers from University of California Riverside. We
recently discovered that some functions in Cairo graphics
library take variable amount of time depending on the input character. As a
result, an unprivileged attacker could potentially utilize flush+reload
cache side-channel attack to measure the execution time of said functions
to infer users' text input. We verified this using the Onboard app that
comes with Ubuntu 16.04.

For detailed information please refer to our paper in the link below. We
would be very happy to work with you to address this issue. Please let us
know what you think.

https://www.cs.ucr.edu/~zhiyunq/pub/ndss19_cache_keystrokes.pdf

Sincerely,
Daimeng Wang

-- 
Daimeng Wang
Department of Computer Science & Engineering
University of California, Riverside

--0000000000001447c2058237127b
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>Dear Cairo Development Team,</div><div><br></div><div=
>We&#39;re a group of researchers from University of California Riverside. =
We recently discovered that some functions in Cairo=C2=A0graphics library=
=C2=A0take=C2=A0variable amount of time depending on the input character. A=
s a result, an unprivileged attacker could potentially utilize flush+reload=
 cache side-channel attack to measure the execution time of said functions =
to infer users&#39; text input. We verified this using the Onboard app that=
 comes with Ubuntu 16.04.</div><div><br></div><div>For detailed information=
 please refer to our paper in the link below. We would be very happy to wor=
k with you to address this issue. Please let us know what you think.</div><=
div><br></div><div><a href=3D"https://www.cs.ucr.edu/~zhiyunq/pub/ndss19_ca=
che_keystrokes.pdf" target=3D"_blank">https://www.cs.ucr.edu/~zhiyunq/pub/n=
dss19_cache_keystrokes.pdf</a></div><div><br></div><div>Sincerely,</div><di=
v>Daimeng Wang</div><div><br></div>-- <br><div dir=3D"ltr" class=3D"m_-6248=
295098965859741gmail_signature" data-smartmail=3D"gmail_signature"><div dir=
=3D"ltr"><span style=3D"font-family:comic sans ms,sans-serif">Daimeng Wang<=
/span><font style=3D"font-family:comic sans ms,sans-serif" size=3D"2"><br>D=
epartment of Computer Science &amp; Engineering<br>University of California=
, Riverside</font><i style=3D"font-family:comic sans ms,sans-serif"><span s=
tyle=3D"font-family:comic sans ms,sans-serif"><br></span><b></b></i><br></d=
iv></div></div>

--0000000000001447c2058237127b--

--===============1946085925==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

LS0gCmNhaXJvIG1haWxpbmcgbGlzdApjYWlyb0BjYWlyb2dyYXBoaWNzLm9yZwpodHRwczovL2xp
c3RzLmNhaXJvZ3JhcGhpY3Mub3JnL21haWxtYW4vbGlzdGluZm8vY2Fpcm8=

--===============1946085925==--