mpi:ec: Least leak with k^(-1) for ECDSA.
0bd4c77be6e0
Actions

Description

mpi:ec: Least leak with k^(-1) for ECDSA.

* src/mpi.h (_gcry_mpi_assign_limb_space): Add.
(_gcry_mpih_mod_lli, _gcry_mpih_mul_lli): Add.
* cipher/ecc-ecdsa.c (_gcry_ecc_ecdsa_sign): Take care
about least leak with k^(-1).

GnuPG-bug-id: T7519
Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>

Details

Provenance

• gniibe

Authored on Tue, May 13, 4:25 AM

Parents

rCaa089ec89bad: mpi:ec: Use ec_mulm_lli in _gcry_mpi_ec_get_affine.

Branches

Unknown

Tags

Unknown

Tasks

T7519: libgcrypt: (EC)DSA signature generation should be constant-time

Event Timeline

• gniibe committed rC0bd4c77be6e0: mpi:ec: Least leak with k^(-1) for ECDSA. (authored by • gniibe).Tue, May 13, 4:25 AM

• gniibe added a task: T7519: libgcrypt: (EC)DSA signature generation should be constant-time.Thu, May 15, 2:51 AM

Changes (2)

Path

Size

cipher/

ecc-ecdsa.c

src/

mpi.h

rC0bd4c77be6e0

View Options

cipher/ecc-ecdsa.c

View Options

mpi:ec: Least leak with k^(-1) for ECDSA.0bd4c77be6e0Actions

Description

Details

Event Timeline

Changes (2)

rC0bd4c77be6e0

cipher/ecc-ecdsa.c

src/mpi.h

mpi:ec: Least leak with k^(-1) for ECDSA.
0bd4c77be6e0
Actions