CVSROOT:        /cvs
Module name:    src
Changes by:     js...@cvs.openbsd.org   2018/06/13 09:05:04

Modified files:
        lib/libcrypto/dsa: dsa_ossl.c 
        lib/libcrypto/ecdsa: ecs_ossl.c 

Log message:
Avoid a timing side-channel leak when generating DSA and ECDSA signatures.

This is caused by an attempt to do fast modular arithmetic, which
introduces branches that leak information regarding secret values.

Issue identified and reported by Keegan Ryan of NCC Group.

ok beck@ tb@

Reply via email to