Manuel Pégourié-Gonnard a4aa89b16e Fix leakage of projective coordinates in ECC ...

See the comments in the code for how an attack would go, and the ChangeLog
entry for an impact assessment. (For ECDSA, leaking a few bits of the scalar
over several signatures translates to full private key recovery using a
lattice attack.)

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>

2020-03-27 09:43:34 +01:00

185 KiB

Raw Blame History

View Raw