{"push_id":663307054,"size":1,"distinct_size":1,"ref":"refs/heads/LIBGCRYPT-1-5-BRANCH","head":"35cd81f134c0da4e7e6fcfe40d270ee1251f52c2","before":"5958574a8285e9d759d7d95418cacd3d352f77a2","commits":[{"sha":"35cd81f134c0da4e7e6fcfe40d270ee1251f52c2","author":{"email":"13bd1fc5137f503b0a8355ad400e7a87ebb45b25@gnupg.org","name":"Werner Koch"},"message":"cipher: Use ciphertext blinding for Elgamal decryption.\n\n* cipher/elgamal.c (USE_BLINDING): New.\n(decrypt): Rewrite to use ciphertext blinding.\n--\n\nCVE-id: CVE-2014-3591\n\nAs a countermeasure to a new side-channel attacks on sliding windows\nexponentiation we blind the ciphertext for Elgamal decryption.  This\nis similar to what we are doing with RSA. This patch is a backport of\nthe GnuPG 1.4 commit ff53cf06e966dce0daba5f2c84e03ab9db2c3c8b.\n\nUnfortunately, the performance impact of Elgamal blinding is quite\nnoticeable (i5-2410M CPU @ 2.30GHz TP 220):\n\n  Algorithm         generate  100*priv  100*public\n  ------------------------------------------------\n  ELG 1024 bit             -     100ms        90ms\n  ELG 2048 bit             -     330ms       350ms\n  ELG 3072 bit             -     660ms       790ms\n\n  Algorithm         generate  100*priv  100*public\n  ------------------------------------------------\n  ELG 1024 bit             -     150ms        90ms\n  ELG 2048 bit             -     520ms       360ms\n  ELG 3072 bit             -    1100ms       800ms\n\nSigned-off-by: Werner Koch <wk@gnupg.org>\n(cherry picked from commit 410d70bad9a650e3837055e36f157894ae49a57d)\n\nResolved conflicts:\n\tcipher/elgamal.c.","distinct":true,"url":"https://api.github.com/repos/Distrotech/libgcrypt/commits/35cd81f134c0da4e7e6fcfe40d270ee1251f52c2"}]}