| commit | 294d1e36c2495ff00e697c9ff622856d3114f14f | [log] [tgz] |
|---|---|---|
| author | Emilia Kasper <emilia@openssl.org> | Thu Aug 28 19:43:49 2014 +0200 |
| committer | Emilia Kasper <emilia@openssl.org> | Wed Sep 24 12:45:42 2014 +0200 |
| tree | 63ca3866af30d5cb93cead2221187810e430ffb8 | |
| parent | 51b7be8d5fb7e20ccb4d38494ddd39bf4fea0924 [diff] |
RT3066: rewrite RSA padding checks to be slightly more constant time. Also tweak s3_cbc.c to use new constant-time methods. Also fix memory leaks from internal errors in RSA_padding_check_PKCS1_OAEP_mgf1 This patch is based on the original RT submission by Adam Langley <agl@chromium.org>, as well as code from BoringSSL and OpenSSL. Reviewed-by: Kurt Roeckx <kurt@openssl.org>