NIIBE Yutaka 6cbc75e712 mpi: Avoid data-dependent timing variations in mpi_powm. ...

* include/mpi.h, mpi/mpiutils.c (mpi_set_cond): New.
* mpi/mpi-pow.c (SIZE_PRECOMP): Rename from SIZE_B_2I3.
(mpi_powm): Access all data in the table and use mpi_set_cond.

--

Access to the precomputed table was indexed by a portion of EXPO,
which could be mounted by a side channel attack.  This change fixes
this particular data-dependent access pattern.

2015-02-26 21:00:05 +09:00

..

_regex.h

Switched to GPLv3.

2007-10-23 10:48:09 +00:00

assuan.h

Switched to GPLv3.

2007-10-23 10:48:09 +00:00

ChangeLog-2011

Rename all ChangeLog files to ChangeLog-2011.

2011-12-02 19:42:56 +01:00

cipher.h

gpg: Distinguish between missing and cleared key flags.

2013-10-04 20:53:51 +02:00

compat.h

Restructured the compat functions and changed its license.

2009-08-25 20:00:24 +00:00

distfiles

Distribute dotlock.h

2012-01-11 01:23:59 -05:00

dotlock.h

gpg: signal handling fix

2013-07-12 17:26:55 +09:00

dynload.h

Switched to GPLv3.

2007-10-23 10:48:09 +00:00

errors.h

Switched to GPLv3.

2007-10-23 10:48:09 +00:00

estream-printf.h

First set of changes to backport the new card code from 2.0.

2009-07-21 14:30:13 +00:00

host2net.h

Use inline functions to convert buffer data to scalars.

2015-02-23 10:47:26 +01:00

http.h

Remove trailing white space from some files

2012-12-19 14:05:56 +01:00

i18n.h

Switched to GPLv3.

2007-10-23 10:48:09 +00:00

iobuf.h

Switched to GPLv3.

2007-10-23 10:48:09 +00:00

keyserver.h

Switched to GPLv3.

2007-10-23 10:48:09 +00:00

memory.h

First set of changes to backport the new card code from 2.0.

2009-07-21 14:30:13 +00:00

mpi.h

mpi: Avoid data-dependent timing variations in mpi_powm.

2015-02-26 21:00:05 +09:00

srv.h

* srv.h: Move to include/srv.h.

2009-04-06 03:18:07 +00:00

ttyio.h

Minor changes to help the VMS port

2010-09-28 10:07:30 +00:00

types.h

mpi: Suppress set-but-unused-variables warnings.

2014-08-20 13:25:17 +02:00

util.h

Add meta option ignore-invalid-option.

2012-12-18 18:26:56 +01:00

zlib-riscos.h

Switched to GPLv3.

2007-10-23 10:48:09 +00:00