cuberite/polarssl
1
0
Fork 0
mirror of https://github.com/cuberite/polarssl.git synced 2025-09-09 23:26:29 -04:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #6492 from daverodgman/ecp_mul_mxz-timing-leak-2.28

Browse Source 
Fix a timing leak in ecp_mul_mxz() - 2.28 backport
This commit is contained in:
Gilles Peskine 2022-10-27 19:46:44 +02:00 committed by GitHub
commit e0917c0346
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
library/ecp.c
View File

@ -2594,7 +2594,7 @@ static int ecp_mul_mxz( mbedtls_ecp_group *grp, mbedtls_ecp_point *R,
MBEDTLS_MPI_CHK( ecp_randomize_mxz( grp, &RP, f_rng, p_rng ) ); MBEDTLS_MPI_CHK( ecp_randomize_mxz( grp, &RP, f_rng, p_rng ) );
/* Loop invariant: R = result so far, RP = R + P */ /* Loop invariant: R = result so far, RP = R + P */
i = mbedtls_mpi_bitlen( m ); /* one past the (zero-based) most significant bit */ i = grp->nbits + 1; /* one past the (zero-based) required msb for private keys */
while( i-- > 0 ) while( i-- > 0 )
{ {
b = mbedtls_mpi_get_bit( m, i ); b = mbedtls_mpi_get_bit( m, i );