Home GnuPG

mpi: Avoid data-dependent timing variations in mpi_powm.
5e72b6c76ebeUnpublished

Unpublished Commit · Learn More

Not On Permanent Ref: This commit is not an ancestor of any permanent ref.

Description

mpi: Avoid data-dependent timing variations in mpi_powm.

* mpi/mpi-pow.c (mpi_powm): Access all data in the table by
mpi_set_cond.

Access to the precomputed table was indexed by a portion of EXPO,
which could be mounted by a side channel attack. This change fixes
this particular data-dependent access pattern.

Details

Provenance
gniibeAuthored on Feb 26 2015, 1:07 PM
Parents
rCd9f002899d26: mpi: Revise mpi_powm.
Branches
Unknown
Tags
Unknown

Event Timeline

NIIBE Yutaka <gniibe@fsij.org> committed rC5e72b6c76ebe: mpi: Avoid data-dependent timing variations in mpi_powm. (authored by NIIBE Yutaka <gniibe@fsij.org>).Feb 26 2015, 1:27 PM