lib/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-07-30 22:43:08 +03:00
Code Activity

Remove potential timing leak in ecdsa_sign()

Browse Source
This commit is contained in:
Manuel Pégourié-Gonnard
2014-03-31 11:55:42 +02:00
parent 6b0d268bc9
commit dd75c3183b
3 changed files with 32 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
include/polarssl/ecp.h
View File

@ -118,6 +118,9 @@ ecp_point;
* short weierstrass, this subgroup is actually the whole curve, and its
* cardinal is denoted by N.
*
* In the case of Short Weierstrass curves, our code requires that N is an odd
* prime. (Use odd in ecp_mul() and prime in ecdsa_sign() for blinding.)
*
* In the case of Montgomery curves, we don't store A but (A + 2) / 4 which is
* the quantity actualy used in the formulas. Also, nbits is not the size of N
* but the required size for private keys.