diff options
| author | Emilia Kasper <emilia@openssl.org> | 2014-08-28 19:43:49 +0200 |
|---|---|---|
| committer | Emilia Kasper <emilia@openssl.org> | 2014-09-24 12:45:42 +0200 |
| commit | 294d1e36c2495ff00e697c9ff622856d3114f14f (patch) | |
| tree | 63ca3866af30d5cb93cead2221187810e430ffb8 /ssl/ssl_err2.c | |
| parent | 51b7be8d5fb7e20ccb4d38494ddd39bf4fea0924 (diff) | |
RT3066: rewrite RSA padding checks to be slightly more constant time.
Also tweak s3_cbc.c to use new constant-time methods.
Also fix memory leaks from internal errors in RSA_padding_check_PKCS1_OAEP_mgf1
This patch is based on the original RT submission by Adam Langley <agl@chromium.org>,
as well as code from BoringSSL and OpenSSL.
Reviewed-by: Kurt Roeckx <kurt@openssl.org>
Diffstat (limited to 'ssl/ssl_err2.c')
0 files changed, 0 insertions, 0 deletions