Fix potential SCA vulnerability in some EC_METHODs
authorNicola Tuveri <nic.tuv@gmail.com>
Sat, 8 Jun 2019 09:48:47 +0000 (12:48 +0300)
committerNicola Tuveri <nic.tuv@gmail.com>
Sun, 5 Jan 2020 06:39:22 +0000 (08:39 +0200)
commit1f60c1c788559ef69ee39ad490ba89b13733e1ca
tree612ceda3e4ba29459c5919d9ad94bb0fcfe5f5fa
parent2c52a36400345d999c8ee3604fe1ea93fddd5cb7
Fix potential SCA vulnerability in some EC_METHODs

This commit addresses a potential side-channel vulnerability in the
internals of some elliptic curve low level operations.
The side-channel leakage appears to be tiny, so the severity of this
issue is rather low.

The issue was reported by David Schrammel and Samuel Weiser.

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de>
(Merged from https://github.com/openssl/openssl/pull/9239)

(cherry picked from commit 3cb914c463ed1c9e32cfb773d816139a61b6ad5f)
crypto/ec/ecp_nistp224.c
crypto/ec/ecp_nistp256.c
crypto/ec/ecp_nistp521.c