Re: Nettle-3.4.1rc1, addressing PKCS#1 side-channel leaks

2019-01-12 Thread Jeffrey Walton
On Sat, Jan 12, 2019 at 6:01 PM Niels Möller wrote: > > Jeffrey Walton writes: > > > I recommend making folks explicitly ask for a debug build with > > -DNETTLE_DEBUG or similar. > > "Debug build" vs "release build" is a bit alien to the way GNU packages > are usually built, and I suspect it part

Re: Nettle-3.4.1rc1, addressing PKCS#1 side-channel leaks

2019-01-12 Thread Niels Möller
Jeffrey Walton writes: > I recommend making folks explicitly ask for a debug build with > -DNETTLE_DEBUG or similar. "Debug build" vs "release build" is a bit alien to the way GNU packages are usually built, and I suspect it partly dates to times where optimization and useful debugging info were

Re: Nettle-3.4.1rc1, addressing PKCS#1 side-channel leaks

2019-01-12 Thread Jeffrey Walton
On Sat, Jan 12, 2019 at 11:47 AM Niels Möller wrote: > > Nikos Mavrogiannopoulos writes: > ... > I'm also considering adding a few more configurations to the ci, > including "CC=gcc -std=c89", CPPFLAGS=-DNODEBUG and --disable-assembler. > Anything I have to keep in mind (e.g., limits on builder r

Re: Nettle-3.4.1rc1, addressing PKCS#1 side-channel leaks

2019-01-12 Thread Niels Möller
Nikos Mavrogiannopoulos writes: > I attach a patch which moves everything to the latest images used by > gnutls (i.e., in addition to your patch, it also moves the x86 builds > to debian). Merged now. And I've deleted eratosthens.c. We'll see how to deal with the static analalyzer's remaining co