NIIBE Yutaka
6cbc75e712
mpi: Avoid data-dependent timing variations in mpi_powm.
...
* include/mpi.h, mpi/mpiutils.c (mpi_set_cond): New.
* mpi/mpi-pow.c (SIZE_PRECOMP): Rename from SIZE_B_2I3.
(mpi_powm): Access all data in the table and use mpi_set_cond.
--
Access to the precomputed table was indexed by a portion of EXPO,
which could be mounted by a side channel attack. This change fixes
this particular data-dependent access pattern.
2015-02-26 21:00:05 +09:00
..
2007-10-23 10:48:09 +00:00
2007-10-23 10:48:09 +00:00
2007-10-23 10:48:09 +00:00
2007-10-23 10:48:09 +00:00
2007-10-23 10:48:09 +00:00
2007-10-23 10:48:09 +00:00
2007-10-23 10:48:09 +00:00
2007-10-23 10:48:09 +00:00
2007-10-23 10:48:09 +00:00
2007-10-23 10:48:09 +00:00
2007-10-23 10:48:09 +00:00
2002-06-29 14:15:02 +00:00
2007-10-23 10:48:09 +00:00
2007-10-23 10:48:09 +00:00
2007-10-23 10:48:09 +00:00
2011-12-02 19:42:56 +01:00
2012-12-13 18:15:38 +01:00
2013-10-11 14:11:43 +02:00
2015-01-19 18:59:13 +01:00
2007-10-23 10:48:09 +00:00
2007-10-23 10:48:09 +00:00
2007-10-23 10:48:09 +00:00
2007-10-23 10:48:09 +00:00
2007-10-23 10:48:09 +00:00
2007-10-23 10:48:09 +00:00
2012-11-06 17:14:04 +01:00
2014-08-20 13:25:17 +02:00
2014-10-03 18:28:58 +02:00
2007-10-23 10:48:09 +00:00
2007-10-23 10:48:09 +00:00
2015-02-26 21:00:05 +09:00
2007-10-23 10:48:09 +00:00
2011-08-09 10:54:22 +02:00
2007-10-23 10:48:09 +00:00
2014-08-20 13:25:17 +02:00
2007-10-23 10:48:09 +00:00
2015-02-26 21:00:05 +09:00