projects / oweals / openssl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 014265e) | patch
Timing fix mitigation for FIPS mode.
authorDr. Stephen Henson <steve@openssl.org>
Tue, 29 Jan 2013 14:44:36 +0000 (14:44 +0000)
committerDr. Stephen Henson <steve@openssl.org>
Thu, 31 Jan 2013 12:34:10 +0000 (12:34 +0000)
commitb908e88ec15aa0a74805e3f2236fc4f83f2789c2
tree424b1a8703f65502460f311a42d3da7521a4085btree | snapshot
parent014265eb02e26f35c8db58e2ccbf100b0b2f0072commit | diff
Timing fix mitigation for FIPS mode.
We have to use EVP in FIPS mode so we can only partially mitigate
timing differences.

Make an extra call to EVP_DigestSignUpdate to hash additonal blocks
to cover any timing differences caused by removal of padding.
ssl/s3_cbc.c diff | blob | history
ssl/ssl_locl.h diff | blob | history
ssl/t1_enc.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.