libsecp256k1 v0.3.1 released

libsecp256k1 v0.3.1 released
From: Pieter Wuille @ 2023-04-10 20:00 UTC (permalink / raw)
  To: Bitcoin dev list

Hello,

Today we'd like to announce the release of version 0.3.1 of libsecp256k1:

  https://github.com/bitcoin-core/secp256k1/releases/tag/v0.3.1

This is a bugfix release after 0.3.0 (which was not announced on this list). For the full release notes of 0.3.0 and 0.3.1 see:

  https://github.com/bitcoin-core/secp256k1/blob/master/CHANGELOG.md

but the impetus for this release is the discovery that Clang 14 and later became smart enough to optimize out a specific timing side-channel protection mechanism in the code that could leave applications vulnerable to a side-channel attack. This has been fixed in 0.3.1.

We strongly recommend any users of the library to upgrade if their code may end up being compiled with Clang 14+. Bitcoin Core release binaries are not affected.

-- 
Pieter




 permalink raw reply	[|nested]