CLA: trivial
Reviewed-by: Paul Dale <ppzgs1@gmail.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24304)
(cherry picked from commit
f4601b6de709a89120c86ad825b70f65b332deed)
If OpenSSL is configured to use a provider that doesn't implement implicit
rejection, the code still needs to handle the returned values
using side-channel free code.
-Side-channel free handling of the error stack can be peformed using
+Side-channel free handling of the error stack can be performed using
either a pair of unconditional L<ERR_set_mark(3)> and L<ERR_pop_to_mark(3)>
calls or by using the L<ERR_clear_error(3)> call.
Applications that want to be secure against side-channel attacks with
providers that don't implement implicit rejection, still need to
handle the returned values using side-channel free code.
-Side-channel free handling of the error stack can be peformed using
+Side-channel free handling of the error stack can be performed using
either a pair of unconditional L<ERR_set_mark(3)> and L<ERR_pop_to_mark(3)>
calls or by using the L<ERR_clear_error(3)> call.