Dear moderators: Can you adjust the title? I misunderstood it, as I think many others will, as defeating all RSA-1024 by all GPG users done on any computer. It's actually about people who share a computer with someone doing a GPG decryption.
The paper's title is: "Sliding right into disaster: Left-to-right sliding windows leak". Standard HN practice is to use the page's title as the post title.
Alternative options that seem clear to me:
- "Local-machine side channel attack defeats RSA-1024 decryption using GPG (CVE-2017-7526)"
- "Complete break of RSA-1024 in GPG (CVE-2017-7526) for local attackers"
- "Sliding right into disaster: Left-to-right sliding window attack against local-machine RSA-1024 in GPG (CVE-2017-7526)"
Thanks!