Devs Working To Stop Go Math Error Bugging Crypto Software (theregister.co.uk)

Richard Chirgwin, writing for The Register: Consider this an item for the watch-list, rather than a reason to hit the panic button: a math error in the Go language could potentially affect cryptographic libraries. Security researcher Guido Vranken (who earlier this year fuzzed up some bugs in OpenVPN) found an exponentiation error in the Go math/big package. Big numbers -- particularly big primes -- are the foundation of cryptography. Vranken posted to the oss-sec mailing list that he found the potential issue during testing of a fuzzer he wrote that "compares the results of mathematical operations (addition, subtraction, multiplication, ...) across multiple bignum libraries." Vranken and Go developer Russ Cox agreed that the bug needs specific conditions to be manifest: "it only affects the case e = 1 with m != nil and a pre-allocated non-zero receiver."

Comments

Re: Very slim edge case

[Anonymous Coward]

Congrats, you've managed to bring up Trump in a completely unrelated article. You guys are worse than Hitler.

Young Math is Best Math

[Anonymous Coward]

Fuck you old people don't know your shit. Young rockstar coders need to reinvent your dinosaur wheels because you fucking suck.

Lol whut r codez iz bugged?!!

Re:Very slim edge case

[behrooz0az]

Ain't karma a bitch?
You laughed at us Iranians when we got ahmadi-nejad, TWICE. Who's laughing now?