gnutls 3.0.11

Nikos Mavrogiannopoulos nmav at
Fri Jan 6 20:54:19 CET 2012

 I've just released gnutls 3.0.11. This release fixes a
timing attack possible in the DTLS code (report and 
patch by Nadhem Alfardan and Kenny Paterson).

* Version 3.0.11 (released 2012-01-06)

** libgnutls: Corrected functionality of
gnutls_record_get_direction(). Reported by Philip Allison.

** libgnutls: Provide less timing information when decoding
TLS/DTLS record packets. Patch by Nadhem Alfardan.

** API and ABI modifications:
No changes since last version.

Getting the Software

GnuTLS may be downloaded from one of the GNU mirror sites or directly
>From <>.  The list of GNU mirrors can be
found at <> and a list of GnuTLS mirrors
can be found at <>.

Here are the XZ compressed sources:

Here are OpenPGP detached signatures signed using key 0x96865171:

Note that it has been signed with my openpgp key:
pub   3104R/96865171 2008-05-04 [expires: 2028-04-29]
uid                  Nikos Mavrogiannopoulos <nmav <at>>
uid                  Nikos Mavrogiannopoulos <n.mavrogiannopoulos <at>>
sub   2048R/9013B842 2008-05-04 [expires: 2018-05-02]
sub   2048R/1404A91D 2008-05-04 [expires: 2018-05-02]


More information about the Gnutls-help mailing list