Remove unnecessary loop in pkey_rsa_decrypt.
authorBernd Edlinger <bernd.edlinger@hotmail.de>
Wed, 26 Apr 2017 07:59:18 +0000 (09:59 +0200)
committerRich Salz <rsalz@openssl.org>
Thu, 27 Apr 2017 00:47:37 +0000 (20:47 -0400)
commit237bc6c997e42295eeb32c8c1c709e6e6042b839
treebb8a8bc22699b4e9a9f83b37231be45f4d29ad80
parentcf10df81e11eaba257368d1996a24fc3fc6d37f4
Remove unnecessary loop in pkey_rsa_decrypt.

It is not necessary to remove leading zeros here because
RSA_padding_check_PKCS1_OAEP_mgf1 appends them again. As this was not done
in constant time, this might have leaked timing information.

Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Andy Polyakov <appro@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/3313)
crypto/rsa/rsa_pmeth.c