Security Advisory - Cache Timing Vulnerability in OpenSSL RSA Key Generation

The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack (CVE-2018-0737). An attacker could exploit this vulnerability to recover the private key. (Vulnerability ID: HWPSIRT-2018-06015)

Huawei has released software updates to fix this vulnerability. This advisory is available at the following link: https://www.huawei.com/cn/psirt/security-advisories/huawei-sa-20181212-01-cache-en.