1
0
mirror of git://git.gnupg.org/gnupg.git synced 2024-11-04 20:38:50 +01:00
gnupg/include
NIIBE Yutaka 6cbc75e712 mpi: Avoid data-dependent timing variations in mpi_powm.
* include/mpi.h, mpi/mpiutils.c (mpi_set_cond): New.
* mpi/mpi-pow.c (SIZE_PRECOMP): Rename from SIZE_B_2I3.
(mpi_powm): Access all data in the table and use mpi_set_cond.

--

Access to the precomputed table was indexed by a portion of EXPO,
which could be mounted by a side channel attack.  This change fixes
this particular data-dependent access pattern.
2015-02-26 21:00:05 +09:00
..
_regex.h Switched to GPLv3. 2007-10-23 10:48:09 +00:00
assuan.h Switched to GPLv3. 2007-10-23 10:48:09 +00:00
ChangeLog-2011 Rename all ChangeLog files to ChangeLog-2011. 2011-12-02 19:42:56 +01:00
cipher.h gpg: Distinguish between missing and cleared key flags. 2013-10-04 20:53:51 +02:00
compat.h Restructured the compat functions and changed its license. 2009-08-25 20:00:24 +00:00
distfiles Distribute dotlock.h 2012-01-11 01:23:59 -05:00
dotlock.h gpg: signal handling fix 2013-07-12 17:26:55 +09:00
dynload.h Switched to GPLv3. 2007-10-23 10:48:09 +00:00
errors.h Switched to GPLv3. 2007-10-23 10:48:09 +00:00
estream-printf.h First set of changes to backport the new card code from 2.0. 2009-07-21 14:30:13 +00:00
host2net.h Use inline functions to convert buffer data to scalars. 2015-02-23 10:47:26 +01:00
http.h Remove trailing white space from some files 2012-12-19 14:05:56 +01:00
i18n.h Switched to GPLv3. 2007-10-23 10:48:09 +00:00
iobuf.h Switched to GPLv3. 2007-10-23 10:48:09 +00:00
keyserver.h Switched to GPLv3. 2007-10-23 10:48:09 +00:00
memory.h First set of changes to backport the new card code from 2.0. 2009-07-21 14:30:13 +00:00
mpi.h mpi: Avoid data-dependent timing variations in mpi_powm. 2015-02-26 21:00:05 +09:00
srv.h * srv.h: Move to include/srv.h. 2009-04-06 03:18:07 +00:00
ttyio.h Minor changes to help the VMS port 2010-09-28 10:07:30 +00:00
types.h mpi: Suppress set-but-unused-variables warnings. 2014-08-20 13:25:17 +02:00
util.h Add meta option ignore-invalid-option. 2012-12-18 18:26:56 +01:00
zlib-riscos.h Switched to GPLv3. 2007-10-23 10:48:09 +00:00