]> git.ipfire.org Git - thirdparty/openssl.git/commit
Clear the point S before freeing in ec_mul_consttime
authorBernd Edlinger <bernd.edlinger@hotmail.de>
Sun, 17 Mar 2019 16:28:24 +0000 (17:28 +0100)
committerBernd Edlinger <bernd.edlinger@hotmail.de>
Mon, 18 Mar 2019 21:50:08 +0000 (22:50 +0100)
commit94eb7d07c0c14bf18bd3a4e4d6c1ef1e6633d447
tree767e8879567fe079fc42663975b2295f6281d554
parentdbf71ae457dfa5632518612b58efccd40f528f26
Clear the point S before freeing in ec_mul_consttime

The secret point R can be recovered from S using the equation R = S - P.
The X and Z coordinates should be sufficient for that.

Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/8505)

(cherry picked from commit 502b871ad4eacc96a31f89d9a9470ca2858da998)
crypto/ec/ec_mult.c