Don't use coordinate blinding when scalar is group order
authorBernd Edlinger <bernd.edlinger@hotmail.de>
Fri, 12 Apr 2019 12:28:00 +0000 (14:28 +0200)
committerBernd Edlinger <bernd.edlinger@hotmail.de>
Sun, 14 Apr 2019 09:27:00 +0000 (11:27 +0200)
commite861d659c0b2ddccc5eff577b322d2fd4a8f9616
tree1d5a468bade8f2af0454c7c677788b0176197645
parentdbd233b8038a0daba891335548d95a0d6f26807d
Don't use coordinate blinding when scalar is group order

This happens in ec_key_simple_check_key and EC_GROUP_check.
Since the the group order is not a secret scalar, it is
unnecessary to use coordinate blinding.

Fixes: #8731

Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/8734)

(cherry picked from commit 3051bf2afab7ac8b7b9c64e68755d1addd2fb8ff)
crypto/ec/ec_mult.c