Modify the RSA_private_decrypt functions to check the padding in
authorBernd Edlinger <bernd.edlinger@hotmail.de>
Wed, 20 Mar 2019 21:02:58 +0000 (22:02 +0100)
committerBernd Edlinger <bernd.edlinger@hotmail.de>
Fri, 22 Mar 2019 13:46:04 +0000 (14:46 +0100)
commit9c0cf214e7836eb5aaf1ea5d3cbf6720533f86b5
treed51e4ebc928ef01839a170bcad64e2401f5c1a51
parent94dc53a3f7549040dd9e61a25485070c14b41c49
Modify the RSA_private_decrypt functions to check the padding in
constant time with a memory access pattern that does not depend
on secret information.

[extended tests]

Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/8543)
crypto/rsa/rsa_oaep.c
crypto/rsa/rsa_pk1.c
crypto/rsa/rsa_ssl.c