diff options
author | Matt Caswell <matt@openssl.org> | 2016-06-07 09:12:51 +0100 |
---|---|---|
committer | Matt Caswell <matt@openssl.org> | 2016-06-07 15:23:41 +0100 |
commit | 3681a4558c13198944e6f7f149c4be188e076e14 (patch) | |
tree | b0b0382f3b3041848860fc3f5792618e5e131072 /crypto/pkcs7/pk7_doit.c | |
parent | d168705e11526a4b487640c7cac5b53ee3646cbc (diff) |
More fix DSA, preserve BN_FLG_CONSTTIME
The previous "fix" still left "k" exposed to constant time problems in
the later BN_mod_inverse() call. Ensure both k and kq have the
BN_FLG_CONSTTIME flag set at the earliest opportunity after creation.
CVE-2016-2178
Reviewed-by: Rich Salz <rsalz@openssl.org>
(cherry picked from commit b7d0f2834e139a20560d64c73e2565e93715ce2b)
Diffstat (limited to 'crypto/pkcs7/pk7_doit.c')
0 files changed, 0 insertions, 0 deletions