Devs Working To Stop Go Math Error Bugging Crypto Software (theregister.co.uk)

Richard Chirgwin, writing for The Register: Consider this an item for the watch-list, rather than a reason to hit the panic button: a math error in the Go language could potentially affect cryptographic libraries. Security researcher Guido Vranken (who earlier this year fuzzed up some bugs in OpenVPN) found an exponentiation error in the Go math/big package. Big numbers -- particularly big primes -- are the foundation of cryptography. Vranken posted to the oss-sec mailing list that he found the potential issue during testing of a fuzzer he wrote that "compares the results of mathematical operations (addition, subtraction, multiplication, ...) across multiple bignum libraries." Vranken and Go developer Russ Cox agreed that the bug needs specific conditions to be manifest: "it only affects the case e = 1 with m != nil and a pre-allocated non-zero receiver."

Comments

Re: Very slim edge case

[Anonymous Coward]

Trump comes up in the first 10 replies in basically every article here.

Re: Very slim edge case

[AvitarX]

Ranges for Trump's election we're 2-33 percent a year and a month ago.

I hope that's not the odds of this big coming up, that seems quite high.

I'd actually put reelection at 25% personally.

Re: Very slim edge case

[Anonymous Coward]

Sometimes you just gotta grab life by the pussy.

Trump 2018!