]> git.ipfire.org Git - thirdparty/openssl.git/commit
SM2: Use constant time modular inversion
authorTomas Mraz <tomas@openssl.org>
Thu, 11 Sep 2025 16:40:34 +0000 (18:40 +0200)
committerTomas Mraz <tomas@openssl.org>
Mon, 29 Sep 2025 10:01:36 +0000 (12:01 +0200)
commitdff94dba75490d03926e77be9f2da3bcf4485820
tree4a5da8fea5ea0adea587fc8c4a24f1df719a7938
parent9c462be2cea54ebfc62953224220b56f8ba22a0c
SM2: Use constant time modular inversion

Fixes CVE-2025-9231

Issue and a proposed fix reported by Stanislav Fort (Aisle Research).

Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
crypto/ec/ecp_sm2p256.c