Manuel Pégourié-Gonnard f60041688c Fix leakage of projective coordinates in ECC ...

See the comments in the code for how an attack would go, and the ChangeLog
entry for an impact assessment. (For ECDSA, leaking a few bits of the scalar
over several signatures translates to full private key recovery using a
lattice attack.)

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>

2020-04-01 11:02:18 +02:00

94 KiB

Raw Blame History

View Raw