]> git.ipfire.org Git - thirdparty/hostap.git/commit
OpenSSL: Use constant time selection for crypto_bignum_legendre()
authorJouni Malinen <jouni@codeaurora.org>
Thu, 7 Mar 2019 22:24:12 +0000 (00:24 +0200)
committerJouni Malinen <j@w1.fi>
Tue, 9 Apr 2019 14:11:15 +0000 (17:11 +0300)
commitc93461c1d98f52681717a088776ab32fd97872b0
tree59e23cccc1a97334fffe0eabfc2d0d9c5e1c4367
parent6e34f618d37ddbb5854c42e2ad4fca83492fa7b7
OpenSSL: Use constant time selection for crypto_bignum_legendre()

Get rid of the branches that depend on the result of the Legendre
operation. This is needed to avoid leaking information about different
temporary results in blinding mechanisms.

This is related to CVE-2019-9494 and CVE-2019-9495.

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
src/crypto/crypto_openssl.c