Re: Fixing the XML signature HMAC truncation authentication bypass

[Robert Buchholz <rbu () gentoo org>]

On Wednesday 15 July 2009, Robert Buchholz wrote:
> Florian Streibelt's analysis of the GnuTLS code indicated that is
> also vulnerable. 

I misread his analysis. That's what happens when I try reading faster 
than my brain follows. The analysis was for the GnuTLS related code of 
xmlsec. Apologies.


Robert

Attachment: signature.asc
Description: This is a digitally signed message part.