CVSROOT: /cvs Module name: src Changes by: t...@cvs.openbsd.org 2014/12/29 09:12:59
Modified files:
lib/libssl/src/ssl: s3_srvr.c
Log message:
don't leak timing info about padding errors by generating a fake key
afterwards. openssl has a more complicated fix, but it's less intrusive
for now to simply hoist the expensive part (fake key generation) up without
sweating a branch or two.
ok bcook jsing
