summaryrefslogtreecommitdiffstats
path: root/crypto/bn
AgeCommit message (Expand)Author
2019-09-07Make BN_num_bits() consttime upon BN_FLG_CONSTTIMENicola Tuveri
2019-09-06Fix a SCA leak in BN_generate_dsa_nonceBernd Edlinger
2019-05-28Update copyright yearRichard Levitte
2019-02-25Ensure bn_cmp_words can handle the case where n == 0Matt Caswell
2019-02-21Clear BN_FLG_CONSTTIME on BN_CTX_get()Nicola Tuveri
2018-11-20Update copyright yearMatt Caswell
2018-11-10[crypto/bn] swap BN_FLG_FIXED_TOP tooBilly Brumley
2018-09-21crypto/bn/asm/x86_64-gcc.c: remove unnecessary redefinition of BN_ULONGRichard Levitte
2018-09-03Check the return from BN_sub() in BN_X931_generate_Xpq().Pauli
2018-08-28bn/bn_lib.c: conceal even memmory access pattern in bn2binpad.Andy Polyakov
2018-08-28bn/bn_blind.c: use Montgomery multiplication when possible.Andy Polyakov
2018-08-28crypto/bn: add more fixed-top routines.Andy Polyakov
2018-08-14Update copyright yearMatt Caswell
2018-07-27bn/bn_mod.c: harmonize BN_mod_add_quick with original implementation.Andy Polyakov
2018-07-27ec/ecdsa_ossl.c: revert blinding in ECDSA signature.Andy Polyakov
2018-07-26bn/bn_{mont|exp}.c: switch to zero-padded intermediate vectors.Andy Polyakov
2018-07-26bn/bn_lib.c: add BN_FLG_FIXED_TOP flag.Andy Polyakov
2018-07-22bn/bn_intern.c: const-ify bn_set_{static}_words.Andy Polyakov
2018-07-18bn/bn_lib.c address Coverity nit in bn2binpad.Andy Polyakov
2018-07-14bn/bn_lib.c: make BN_bn2binpad computationally constant-time.Andy Polyakov
2018-07-12bn/bn_mont.c: improve readability of post-condition code.Andy Polyakov
2018-07-12bn/bn_mont.c: move boundary condition check closer to caller.Andy Polyakov
2018-07-12bn/bn_lib.c: remove bn_check_top from bn_expand2.Andy Polyakov
2018-06-18bn/asm/rsaz-avx2.pl: harmonize clang version detection.Andy Polyakov
2018-06-09bn/asm/sparcv9-mont.pl: iron another glitch in squaring code path.Andy Polyakov
2018-05-29The result of a ^ 0 mod -1 is 0 not 1Matt Caswell
2018-05-20Fix a possible crash in BN_from_montgomery_wordBernd Edlinger
2018-05-17Make BN_GF2m_mod_arr more constant timeMatt Caswell
2018-05-04bn/asm/*-mont.pl: harmonize with BN_from_montgomery_word.Andy Polyakov
2018-05-03Return an error from BN_mod_inverse if n is 1 (or -1)Matt Caswell
2018-04-27fix: BN_swap mishandles flags (1.1.0)Billy Brumley
2018-04-23Remove superfluous NULL checks. Add Andy's BN_FLG comment.Billy Brumley
2018-04-23Elliptic curve scalar multiplication with timing attack defensesBilly Brumley
2018-03-27Update copyright yearMatt Caswell
2018-02-06Remove unused fileRich Salz
2018-02-01Fix timing leak in BN_from_montgomery_word.David Benjamin
2018-02-01Don't leak the exponent bit width in BN_mod_exp_mont_consttime.David Benjamin
2018-02-01Make BN_num_bits_word constant-time.David Benjamin
2018-01-16Revert BN_copy() flag copy semantics changeMatt Caswell
2017-12-08Standardize syntax of sizeof(foo)Rich Salz
2017-12-06bn/asm/rsaz-avx2.pl: fix digit correction bug in rsaz_1024_mul_avx2.Andy Polyakov
2017-11-16bn/bn_add.c: address performance regression.Andy Polyakov
2017-11-02bn/asm/x86_64-mont5.pl: fix carry bug in bn_sqrx8x_internal.Andy Polyakov
2017-10-23Correct value for BN_security_bits()Matt Caswell
2017-10-11Ensure we test all parameters for BN_FLG_CONSTTIMEMatt Caswell
2017-09-27BN_copy now propagates BN_FLG_CONSTTIMESamuel Weiser
2017-09-27Fixed error in propagating BN_FLG_CONSTTIME flag through BN_MONT_CTX_set, whi...Samuel Weiser
2017-07-14Fix gcc-7 warnings about missing fall thru comments.Bernd Edlinger
2017-06-17Remove a pointless "#if 0" block from BN_mul.Bernd Edlinger
2017-06-14Fix possible crash in X931 code.Bernd Edlinger