Ubuntu
openssl package

  1. Focal (20.04)
  2. Bug #1951279
  3. Comment #18

Comment 18 for bug 1951279

Revision history for this message
Anders Kaseorg (andersk) wrote :

David Hess’s analysis is correct. This is a bug in the ARM64 assembly for Poly1305, introduced in

https://github.com/openssl/openssl/commit/2cf7fd698ec1375421f91338ff8a44e7da5238b6 (OpenSSL_1_1_1b~37)

and fixed upstream in

https://github.com/openssl/openssl/commit/5795acffd8706e1cb584284ee5bb3a30986d0e75 (OpenSSL_1_1_1i~21).

This fix needs to be backported to focal.