Timing vulnerability in DSA signature generation (CVE-2018-0734).
authorPauli <paul.dale@oracle.com>
Tue, 23 Oct 2018 21:42:46 +0000 (07:42 +1000)
committerPauli <paul.dale@oracle.com>
Sun, 28 Oct 2018 22:01:57 +0000 (08:01 +1000)
commitef11e19d1365eea2b1851e6f540a0bf365d303e7
tree22f8ea2bce325a11e0e4255675c49b547a8ff065
parent84862c0979737b591acb689aef41ae2644176f32
Timing vulnerability in DSA signature generation (CVE-2018-0734).

Avoid a timing attack that leaks information via a side channel that
triggers when a BN is resized.  Increasing the size of the BNs
prior to doing anything with them suppresses the attack.

Thanks due to Samuel Weiser for finding and locating this.

Reviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de>
(Merged from https://github.com/openssl/openssl/pull/7486)

(cherry picked from commit a9cfb8c2aa7254a4aa6a1716909e3f8cb78049b6)
crypto/dsa/dsa_ossl.c