<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<html lang="en">
<head>
<meta content="text/html; charset=US-ASCII" http-equiv="Content-Type">
<title>
GitLab
</title>
<style data-premailer="ignore" type="text/css">
a { color: #1068bf; }
</style>
<style>img {
max-width: 100%; height: auto;
}
body {
font-size: 0.875rem;
}
body {
-webkit-text-shadow: rgba(255,255,255,0.01) 0 0 1px;
}
body {
font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Noto Sans", Ubuntu, Cantarell, "Helvetica Neue", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; font-size: inherit;
}
</style>
</head>
<body style='font-size: inherit; -webkit-text-shadow: rgba(255,255,255,0.01) 0 0 1px; font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Noto Sans", Ubuntu, Cantarell, "Helvetica Neue", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji";'>
<div class="content">
<p style="color: #777777;">
<a href="https://gitlab.com/ametzler" style="color: #1068bf;">Andreas Metzler</a>
commented on a
<a href="https://gitlab.com/gnutls/gnutls/-/issues/1398#note_1071554068" style="color: #1068bf;">discussion</a>:
</p>
<div class="md" style="color: #303030; word-wrap: break-word;">
<p dir="auto" style="color: #303030; margin: 0 0 16px;" align="initial">Daiki Ueno <a href="https://gitlab.com/dueno" data-user="470892" data-reference-type="user" data-container="body" data-placement="top" class="gfm gfm-project_member js-user-link" title="Daiki Ueno" style="color: #1068bf; background-color: #cbe2f9; border-radius: 4px; margin-top: 0; padding: 0 2px;">@dueno</a> wrote</p>
<blockquote dir="auto" style="font-size: inherit; color: #525252; padding-top: 0.5rem; padding-bottom: 0.5rem; padding-left: 1.5rem; box-shadow: inset 4px 0 0 0 #dbdbdb; border-top-width: 0; border-bottom-width: 0; border-right-width: 0; margin: 0.5rem 0;" align="initial">
<p style="color: inherit; line-height: 1.5; margin: 0 0 16px;">the current alternatives under discussion are:</p>
<ul style="margin: 0 0 16px; padding: 0;">
<li style="margin-top: 0; line-height: 1.6em; margin-left: 25px; padding-left: 3px;">switch mpz_ usage in Nettle and GnuTLS to using the low-level mpn_ functions, and implement zeroization directly</li>
<li style="line-height: 1.6em; margin-left: 25px; padding-left: 3px;">link to a static library of GMP so the call to mp_set_memory_functions doesn't affect other GMP users</li>
</ul>
<p style="color: inherit; line-height: 1.5; margin: 0;">While the former would be better in the long run, it would require significant effort in porting. The latter would be simpler, though it would slightly increase the library size (see <a href="https://gitlab.com/gnutls/gnutls/-/merge_requests/1635" data-original="!1635" data-link="false" data-link-reference="false" data-project="179611" data-merge-request="172404695" data-project-path="gnutls/gnutls" data-iid="1635" data-reference-type="merge_request" data-container="body" data-placement="top" title="build: allow GMP to be statically linked" class="gfm gfm-merge_request" style="color: #1068bf; margin-top: 0;">!1635</a> and the example usage in nettle and gnutls packages in CentOS Stream 9).</p>
</blockquote>
<p dir="auto" style="color: #303030; margin: 0;" align="initial">Increased size is not the only downside, any (security, serious, ...) issue in GMP would only be fixed in GnuTLS <em style="margin-top: 0;">if</em> it was rebuilt against a fixed version of GMP. (Increased memory usage is another, but less significant point.)</p>
</div>
</div>
<div class="footer" style="margin-top: 10px;">
<p style="font-size: small; color: #666;">
—
<br>
Reply to this email directly or <a href="https://gitlab.com/gnutls/gnutls/-/issues/1398#note_1071554068" style="color: #1068bf;">view it on GitLab</a>.
<br>
You're receiving this email because of your account on <a target="_blank" rel="noopener noreferrer" href="https://gitlab.com" style="color: #1068bf;">gitlab.com</a>. <a href="https://gitlab.com/-/sent_notifications/7b04696c51b2e7135451384592ca69a1/unsubscribe" target="_blank" rel="noopener noreferrer" style="color: #1068bf;">Unsubscribe</a> from this thread · <a href="https://gitlab.com/-/profile/notifications" target="_blank" rel="noopener noreferrer" class="mng-notif-link" style="color: #1068bf;">Manage all notifications</a> · <a href="https://gitlab.com/help" target="_blank" rel="noopener noreferrer" class="help-link" style="color: #1068bf;">Help</a>
<script type="application/ld+json">{"@context":"http://schema.org","@type":"EmailMessage","action":{"@type":"ViewAction","name":"View Issue","url":"https://gitlab.com/gnutls/gnutls/-/issues/1398#note_1071554068"}}</script>
</p>
</div>
</body>
</html>