[openssl-project] FW: April Crypto Bulletin from Cryptosense

Salz, Rich rsalz at akamai.com
Tue Apr 3 15:29:14 UTC 2018


    
    On 03/04/18 15:55, Salz, Rich wrote:
    > This is one reason why keeping around old assembly code can have a cost. :(
    
    Although in this case the code is <2 years old:

So?  It's code that we do not test, and have not tested in years.  And guess what?  Critical CVE.



More information about the openssl-project mailing list