mpi: harden swap_cond functions against EM leakage
1266f5bb02b7
Actions

Description

mpi: harden swap_cond functions against EM leakage

* mpi/mpih-const-time.c (vzero, vone): New.
(_gcry_mpih_swap_cond): Use two masks for selecting output.
* mpi/mpiutil.c (vzero, vone): New.
(_gcry_mpi_swap_cond): Use to masks for selecting output.

GnuPG-bug-id: T5330
Signed-off-by: Jussi Kivilinna <jussi.kivilinna@iki.fi>

Details

Provenance

jukivili

Authored on Apr 3 2021, 6:59 PM

Parents

rC840713de1a68: cipher: Return GPG_ERR_INV_KEYLEN when wrong key length.

Branches

Unknown

Tags

Unknown

Tasks

Restricted Maniphest Task

Event Timeline

jukivili committed rC1266f5bb02b7: mpi: harden swap_cond functions against EM leakage (authored by jukivili).Apr 9 2021, 4:22 PM

jukivili added a task: Restricted Maniphest Task.Apr 12 2021, 7:40 PM

Changes (2)

Path

Size

mpi/

mpih-const-time.c

mpiutil.c

rC1266f5bb02b7

View Options

mpi/mpih-const-time.c