Any plans to add protection against Specte?

[oblique]

One way is what OpenSSH does, which is encrypting sensitive information with a random prekey of 16kb size. Because of the size, attacker is unlikely to retrieve prekey with the current attacks.

OpenSSH commit: openbsd/src@707316f

[stouset]

Yep. sodium_mshield was added to libsodium in a recent commit but has yet to be released. When it is, I'll incorporate it.

[U007D]

Hi, I'm wondering if there are any updates on this?

Thanks for all your hard work.

[stouset]

I’m out of the country on vacation at the moment but I’ll look and see if this was added to a libsodium release and incorporate it if so.

[stouset]

sodium_mshield was removed from upstream. jedisct1/libsodium@67a9e79