diff options
| author | Bernd Edlinger <bernd.edlinger@hotmail.de> | 2019-03-17 17:28:24 +0100 |
|---|---|---|
| committer | Bernd Edlinger <bernd.edlinger@hotmail.de> | 2019-03-18 22:50:08 +0100 |
| commit | 94eb7d07c0c14bf18bd3a4e4d6c1ef1e6633d447 (patch) | |
| tree | 767e8879567fe079fc42663975b2295f6281d554 | |
| parent | dbf71ae457dfa5632518612b58efccd40f528f26 (diff) | |
Clear the point S before freeing in ec_mul_consttime
The secret point R can be recovered from S using the equation R = S - P.
The X and Z coordinates should be sufficient for that.
Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/8505)
(cherry picked from commit 502b871ad4eacc96a31f89d9a9470ca2858da998)
| -rw-r--r-- | crypto/ec/ec_mult.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/crypto/ec/ec_mult.c b/crypto/ec/ec_mult.c index da71526818..fce88822f6 100644 --- a/crypto/ec/ec_mult.c +++ b/crypto/ec/ec_mult.c @@ -519,7 +519,7 @@ static int ec_mul_consttime(const EC_GROUP *group, EC_POINT *r, ret = 1; err: - EC_POINT_free(s); + EC_POINT_clear_free(s); BN_CTX_end(ctx); BN_CTX_free(new_ctx); |