Modify the RSA_private_decrypt functions to check the padding in
authorBernd Edlinger <bernd.edlinger@hotmail.de>
Wed, 20 Mar 2019 21:02:58 +0000 (22:02 +0100)
committerBernd Edlinger <bernd.edlinger@hotmail.de>
Fri, 22 Mar 2019 13:48:09 +0000 (14:48 +0100)
commit683403b3449cd901ec9fa95667c92f6eb89d239b
tree64459f362315e1859b72e57473bf45361d14d770
parent33726188f40fe0598849855778ce266f80d0751e
Modify the RSA_private_decrypt functions to check the padding in
constant time with a memory access pattern that does not depend
on secret information.

[extended tests]

Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/8543)

(cherry picked from commit 9c0cf214e7836eb5aaf1ea5d3cbf6720533f86b5)
crypto/rsa/rsa_oaep.c
crypto/rsa/rsa_pk1.c
crypto/rsa/rsa_ssl.c