Page MenuHome GnuPG

constant-time mpi_invm
Closed, ResolvedPublic

Description

For mpi_invm implementation, computation time should be fixed time.

Event Timeline

Related the changes, before we did the changes, we received two independent reports.

For one, the reference is: https://arxiv.org/pdf/2002.08437.pdf

gniibe changed the task status from Open to Testing.Mar 19 2020, 5:10 AM
gniibe added a project: Testing.

I tested with this patch (which changes use of constant-time routine when it's secure memory):

build-amd64/libgcrypt/tests$ ./benchmark mpi-invm
invm-generic  1210ms  1060ms   870ms  2010ms  2010ms   950ms
invm-ct        370ms   360ms   370ms  1030ms  1030ms  1080ms

My opinion is that it's OK not to introduce the check if it's on secure memory or not.

werner removed a project: Testing.