1
0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-04-24 21:47:04 +03:00
Aurelien Jarno edc110d15a Fix a timing leak in ecp_mul_mxz()
The bit length of m is leaked through through timing in ecp_mul_mxz().
Initially found by Manuel Pégourié-Gonnard on ecp_mul_edxyz(), which has
been inspired from ecp_mul_mxz(), during initial review of the EdDSA PR.
See: https://github.com/Mbed-TLS/mbedtls/pull/3245#discussion_r490827996

Fix that by using grp->nbits + 1 instead, which anyway is very close to
the length of m, which means there is no significant performance impact.

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
2022-10-27 11:58:15 +01:00
..
2022-07-11 10:43:55 +01:00
2022-05-09 11:03:26 +02:00
2022-10-27 11:58:15 +01:00
2022-10-07 15:47:39 +02:00
2021-12-15 11:55:31 +00:00
2021-03-29 14:20:18 +01:00
2021-04-07 12:45:35 +01:00
2021-03-29 14:20:18 +01:00
2021-04-07 12:45:35 +01:00
2021-12-13 11:14:45 +00:00
2020-11-25 13:10:50 +01:00
2021-11-30 14:49:19 +01:00
2020-11-25 13:10:50 +01:00
2022-03-29 17:56:55 +02:00