Modify the RSA_private_decrypt functions to check the padding in
authorBernd Edlinger <bernd.edlinger@hotmail.de>
Wed, 20 Mar 2019 21:02:58 +0000 (22:02 +0100)
committerBernd Edlinger <bernd.edlinger@hotmail.de>
Fri, 22 Mar 2019 13:48:24 +0000 (14:48 +0100)
commit8f58aa0a5edad245e7103449b1639b4b9d4233ea
treee41288ebdecc0214b989b5d7a8a9a94c1d2c8ea1
parent2a483a87e74ec33bfcd904dbaeaa017c658f0389
Modify the RSA_private_decrypt functions to check the padding in
constant time with a memory access pattern that does not depend
on secret information.

[extended tests]

Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/8543)

(cherry picked from commit 9c0cf214e7836eb5aaf1ea5d3cbf6720533f86b5)
crypto/rsa/rsa_oaep.c
crypto/rsa/rsa_pk1.c
crypto/rsa/rsa_ssl.c