diff options
| author | Pauli <paul.dale@oracle.com> | 2018-11-01 08:44:11 +1000 |
|---|---|---|
| committer | Pauli <paul.dale@oracle.com> | 2018-11-02 08:18:20 +1000 |
| commit | 880d1c76ed9916cddb97fe05fb4c144f0f6f1012 (patch) | |
| tree | 7142be7ca68967294fdeff6d34296b75a406c258 | |
| parent | ebf65dbe1a67682d7e1f58db9c53ef737fb37f32 (diff) | |
Add a constant time flag to one of the bignums to avoid a timing leak.
Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/7549)
(cherry picked from commit 00496b6423605391864fbbd1693f23631a1c5239)
| -rw-r--r-- | crypto/dsa/dsa_ossl.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/crypto/dsa/dsa_ossl.c b/crypto/dsa/dsa_ossl.c index 80daf60418..c887c3c34e 100644 --- a/crypto/dsa/dsa_ossl.c +++ b/crypto/dsa/dsa_ossl.c @@ -295,9 +295,9 @@ static int dsa_sign_setup(DSA *dsa, BN_CTX *ctx_in, BIGNUM **kinvp, if ((dsa->flags & DSA_FLAG_NO_EXP_CONSTTIME) == 0) { BN_set_flags(&k, BN_FLG_CONSTTIME); + BN_set_flags(&l, BN_FLG_CONSTTIME); } - if (dsa->flags & DSA_FLAG_CACHE_MONT_P) { if (!BN_MONT_CTX_set_locked(&dsa->method_mont_p, CRYPTO_LOCK_DSA, dsa->p, ctx)) |