git.ipfire.org Git - thirdparty/openssl.git/commit

]> git.ipfire.org Git - thirdparty/openssl.git/commit

projects / thirdparty / openssl.git / commit

author	Dr. Stephen Henson <steve@openssl.org>
	Tue, 29 Jan 2013 14:44:36 +0000 (14:44 +0000)
committer	Dr. Stephen Henson <steve@openssl.org>
	Wed, 6 Feb 2013 14:19:08 +0000 (14:19 +0000)
commit	c4e6fb15244e27f1e93df3f59fe37b59a784f5dc
tree	19fb2aa775ca60fd53f87309e64b1c5f295493c9	tree \| snapshot
parent	a693ead6dc75455f7f5bbbd631b3a0e7ee457965	commit \| diff

Timing fix mitigation for FIPS mode.
We have to use EVP in FIPS mode so we can only partially mitigate
timing differences.

Make an extra call to EVP_DigestSignUpdate to hash additonal blocks
to cover any timing differences caused by removal of padding.
(cherry picked from commit b908e88ec15aa0a74805e3f2236fc4f83f2789c2)

ssl/s3_cbc.c		diff \| blob \| blame \| history
ssl/ssl_locl.h		diff \| blob \| blame \| history
ssl/t1_enc.c		diff \| blob \| blame \| history

Mirror of https://github.com/openssl/openssl.git

RSS Atom