tree baadef3cf3ed74ba3068742c4dcac359868625e4
parent 48bc0d99af6df9919ddbe71e4bc6d8690e9b5174
author Andy Polyakov <appro@openssl.org> 1525121991 +0200
committer Andy Polyakov <appro@openssl.org> 1525290921 +0200

bn/asm/*-mont.pl: harmonize with BN_from_montgomery_word.

Montgomery multiplication post-conditions in some of code paths were
formally non-constant time. Cache access pattern was result-neutral,
but a little bit asymmetric, which might have produced a signal [if
processor reordered load and stores at run-time].

Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/6141)