RT3425: constant-time evp_enc
authorEmilia Kasper <emilia@openssl.org>
Fri, 5 Sep 2014 12:47:33 +0000 (14:47 +0200)
committerEmilia Kasper <emilia@openssl.org>
Wed, 24 Sep 2014 14:29:02 +0000 (16:29 +0200)
commitb55ff319f880adc874b8c95957adf2003117d42b
tree0c229d3da9e1793622fec4026f87ded809a6eb6a
parent9a6940a349211e0d82dffa087d832656887374b9
RT3425: constant-time evp_enc

Do the final padding check in EVP_DecryptFinal_ex in constant time to
avoid a timing leak from padding failure.

Reviewed-by: Rich Salz <rsalz@openssl.org>
(cherry picked from commit 4aac102f75b517bdb56b1bcfd0a856052d559f6e)

Conflicts:
crypto/evp/evp_enc.c

(cherry picked from commit 738911cde68b2b3706e502cf8daf5b14738f2f42)

Conflicts:
crypto/evp/evp_enc.c
crypto/evp/Makefile
crypto/evp/evp_enc.c