Don't use coordinate blinding when scalar is group order
authorBernd Edlinger <bernd.edlinger@hotmail.de>
Fri, 12 Apr 2019 12:28:00 +0000 (14:28 +0200)
committerBernd Edlinger <bernd.edlinger@hotmail.de>
Sun, 14 Apr 2019 09:24:08 +0000 (11:24 +0200)
commit3051bf2afab7ac8b7b9c64e68755d1addd2fb8ff
tree50e9c9f86c4d8f1f2d2f343cfcd971b9cd38811f
parent938e82f622eb04ebbfe534c79d234d0f6a0df035
Don't use coordinate blinding when scalar is group order

This happens in ec_key_simple_check_key and EC_GROUP_check.
Since the the group order is not a secret scalar, it is
unnecessary to use coordinate blinding.

Fixes: #8731

Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/8734)
crypto/ec/ec_mult.c