openssl/crypto/rsa
Ben Laurie 2708813166 Add and use a constant-time memcmp.
This change adds CRYPTO_memcmp, which compares two vectors of bytes in
an amount of time that's independent of their contents. It also changes
several MAC compares in the code to use this over the standard memcmp,
which may leak information about the size of a matching prefix.
(cherry picked from commit 2ee798880a)

Conflicts:
	crypto/crypto.h
	ssl/t1_lib.c
(cherry picked from commit dc406b59f3169fe191e58906df08dce97edb727c)

Conflicts:
	crypto/crypto.h
	ssl/d1_pkt.c
	ssl/s3_pkt.c
2013-02-05 16:50:32 +00:00
..
.cvsignore Add emacs cache files to .cvsignore. 2005-04-11 14:17:07 +00:00
Makefile Make update: delete duplicate error code. 2008-09-17 17:11:09 +00:00
rsa.h Merge public key FIPS code, RSA, DSA, DH. 2008-09-16 14:55:26 +00:00
rsa_asn1.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
rsa_chk.c This is a first-cut at improving the callback mechanisms used in 2002-12-08 05:24:31 +00:00
rsa_depr.c backport recent changes from the cvs head 2006-02-08 19:16:33 +00:00
rsa_eay.c BN_BLINDING multi-threading fix. 2011-10-19 14:57:59 +00:00
rsa_eng.c PR: 2124 2009-12-09 13:41:50 +00:00
rsa_err.c Merge public key FIPS code, RSA, DSA, DH. 2008-09-16 14:55:26 +00:00
rsa_gen.c Merge public key FIPS code, RSA, DSA, DH. 2008-09-16 14:55:26 +00:00
rsa_lib.c Merge public key FIPS code, RSA, DSA, DH. 2008-09-16 14:55:26 +00:00
rsa_none.c Constify the RSA library. 2000-11-06 22:34:17 +00:00
rsa_null.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
rsa_oaep.c Add and use a constant-time memcmp. 2013-02-05 16:50:32 +00:00
rsa_pk1.c The logic in the main signing and verifying functions to check lengths was 2002-11-26 11:14:32 +00:00
rsa_pss.c Submitted by: Julia Lawall <julia@diku.dk> 2009-09-13 11:20:38 +00:00
rsa_saos.c Add lots of checks for memory allocation failure, error codes to indicate 2004-12-05 01:03:15 +00:00
rsa_sign.c Bypass algorithm blocking with TLS MD5+SHA1 signature in FIPS mode by 2010-01-27 00:51:24 +00:00
rsa_ssl.c We should check the eight bytes starting at p[-9] for rollback attack 2008-07-17 22:11:24 +00:00
rsa_test.c Make sure we detect corruption. 2007-04-04 12:50:13 +00:00
rsa_x931.c Change old obsolete email address... 2008-11-05 18:36:57 +00:00
rsa_x931g.c PR: 1840 2009-02-14 22:19:31 +00:00