]> git.ipfire.org Git - thirdparty/openssl.git/commit
Modify the RSA_private_decrypt functions to check the padding in
authorBernd Edlinger <bernd.edlinger@hotmail.de>
Wed, 20 Mar 2019 21:02:58 +0000 (22:02 +0100)
committerBernd Edlinger <bernd.edlinger@hotmail.de>
Fri, 22 Mar 2019 13:48:37 +0000 (14:48 +0100)
commitc3e7beab2a302e3eff45b156751240d0897d50f5
treeb585a47605a0e5cc6ffb1494c9038981b08dd472
parentd284d277707f9985e69bdba1511ecfbb1e53ac46
Modify the RSA_private_decrypt functions to check the padding in
constant time with a memory access pattern that does not depend
on secret information.

[extended tests]

Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/8543)

(cherry picked from commit 9c0cf214e7836eb5aaf1ea5d3cbf6720533f86b5)
crypto/rsa/rsa_oaep.c
crypto/rsa/rsa_pk1.c
crypto/rsa/rsa_ssl.c