Avoid leaking intermediate states in point doubling special case.
authorDavid Benjamin <davidben@google.com>
Fri, 14 Jun 2019 21:06:52 +0000 (17:06 -0400)
committerNicola Tuveri <nic.tuv@gmail.com>
Sun, 5 Jan 2020 06:39:22 +0000 (08:39 +0200)
commit6f52dbb68fb88d693b4e49a2a5d6638534cd8a79
tree67e7108e21c0fe6953fe2835fa4ae9b62af394ee
parent1f60c1c788559ef69ee39ad490ba89b13733e1ca
Avoid leaking intermediate states in point doubling special case.

Cherry picked from
https://github.com/google/boringssl/commit/12d9ed670da3edd64ce8175cfe0e091982989c18

Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com>
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de>
(Merged from https://github.com/openssl/openssl/pull/9239)

(cherry picked from commit 2baea7c7e0896658b74956cac6084dd7e82e8c1b)
crypto/ec/asm/ecp_nistz256-x86_64.pl