commit 94dc53a3f7549040dd9e61a25485070c14b41c49
author Bernd Edlinger <bernd.edlinger@hotmail.de> Wed Mar 20 20:01:12 2019 +0100
committer Bernd Edlinger <bernd.edlinger@hotmail.de> Fri Mar 22 14:22:11 2019 +0100
tree cac04a7d0f56f9c079011d404808afe1ed6d56f2
parent b3d113ed2993801ee643126118ccf6592ad18ef7

Make err_clear_constant_time really constant time

[extended tests]

Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/8542)

crypto/rsa/rsa_ossl.c

diff --git a/crypto/rsa/rsa_ossl.c b/crypto/rsa/rsa_ossl.c
index 189d3b7..e6876de 100644
--- a/crypto/rsa/rsa_ossl.c
+++ b/crypto/rsa/rsa_ossl.c
@@ -479,7 +479,7 @@
         goto err;
     }
     RSAerr(RSA_F_RSA_OSSL_PRIVATE_DECRYPT, RSA_R_PADDING_CHECK_FAILED);
-    err_clear_last_constant_time(r >= 0);
+    err_clear_last_constant_time(1 & ~constant_time_msb(r));
 
  err:
     BN_CTX_end(ctx);