diff options
| author | Matt Caswell <matt@openssl.org> | 2016-06-07 09:12:51 +0100 |
|---|---|---|
| committer | Matt Caswell <matt@openssl.org> | 2016-06-07 15:23:41 +0100 |
| commit | 3681a4558c13198944e6f7f149c4be188e076e14 (patch) | |
| tree | b0b0382f3b3041848860fc3f5792618e5e131072 /crypto/bio/bf_nbio.c | |
| parent | d168705e11526a4b487640c7cac5b53ee3646cbc (diff) | |
More fix DSA, preserve BN_FLG_CONSTTIME
The previous "fix" still left "k" exposed to constant time problems in
the later BN_mod_inverse() call. Ensure both k and kq have the
BN_FLG_CONSTTIME flag set at the earliest opportunity after creation.
CVE-2016-2178
Reviewed-by: Rich Salz <rsalz@openssl.org>
(cherry picked from commit b7d0f2834e139a20560d64c73e2565e93715ce2b)
Diffstat (limited to 'crypto/bio/bf_nbio.c')
0 files changed, 0 insertions, 0 deletions