Files
mbedtls/library
Manuel Pégourié-Gonnard ac12767ff3 Fix non-constant-time comparison in mbedtls_ecp_gen_privkey
Calling mbedtls_mpi_cmp_int reveals the number of leading zero limbs
to an adversary who is capable of very fine-grained timing
measurements. This is very little information, but could be practical
with secp521r1 (1/512 chance of the leading limb being 0) if the
adversary can measure the precise timing of a large number of
signature operations.

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
2021-06-01 12:06:57 +02:00
..
2021-05-25 18:45:46 +02:00
2021-03-04 14:43:17 +00:00
2020-11-16 13:07:51 +01:00
2020-09-09 15:17:11 +02:00
2021-02-22 19:40:41 +01:00