]> git.ipfire.org Git - thirdparty/hostap.git/commit
SAE: Use constant time operations in sae_test_pwd_seed_ffc()
authorJouni Malinen <jouni@codeaurora.org>
Sat, 2 Mar 2019 14:05:56 +0000 (16:05 +0200)
committerJouni Malinen <j@w1.fi>
Tue, 9 Apr 2019 14:11:15 +0000 (17:11 +0300)
commitcff138b0747fa39765cbc641b66cfa5d7f1735d1
treeab4eb41fa389e7e8faeb27f95ec3ca195d684dea
parentf8f20717f87eff1f025f48ed585c7684debacf72
SAE: Use constant time operations in sae_test_pwd_seed_ffc()

Try to avoid showing externally visible timing or memory access
differences regardless of whether the derived pwd-value is smaller than
the group prime.

This is related to CVE-2019-9494.

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
src/common/sae.c