openssl/crypto/ec
Bernd Edlinger e861d659c0 Don't use coordinate blinding when scalar is group order
This happens in ec_key_simple_check_key and EC_GROUP_check.
Since the the group order is not a secret scalar, it is
unnecessary to use coordinate blinding.

Fixes: #8731

Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/8734)

(cherry picked from commit 3051bf2afa)
2019-04-14 11:27:00 +02:00
..
asm Update copyright year 2019-02-26 14:05:09 +00:00
curve448 Fixed linux_x86_icc compiler errors in EC code related to __uint128_t/__int128_t 2019-04-11 08:42:10 +10:00
build.info Add ec/asm/x25519-ppc64.pl module. 2018-07-26 14:01:49 +02:00
curve25519.c Fixed linux_x86_icc compiler errors in EC code related to __uint128_t/__int128_t 2019-04-11 08:42:10 +10:00
ec2_oct.c fixed public range check in ec_GF2m_simple_oct2point 2019-03-30 14:51:47 +01:00
ec2_smpl.c Added NULL check to BN_clear() & BN_CTX_end() 2019-03-19 07:28:39 +01:00
ec_ameth.c Fix the default digest algorthm of SM2 2019-02-27 10:09:54 +08:00
ec_asn1.c Use the new non-curve type specific EC functions internally 2018-07-31 09:08:38 +01:00
ec_check.c
ec_curve.c Use the new non-curve type specific EC functions internally 2018-07-31 09:08:38 +01:00
ec_cvt.c Update copyright year 2018-09-11 13:45:17 +01:00
ec_err.c SCA hardening for mod. field inversion in EC_GROUP 2019-02-20 19:54:19 +02:00
ec_key.c Fix segfault in RSA_free() (and DSA/DH/EC_KEY) 2018-09-05 15:22:35 +03:00
ec_kmeth.c Update copyright year 2018-09-11 13:45:17 +01:00
ec_lcl.h Rearrange the inclusion of curve448/curve448_lcl.h 2019-02-25 19:37:01 +01:00
ec_lib.c Added NULL check to BN_clear() & BN_CTX_end() 2019-03-19 07:28:39 +01:00
ec_mult.c Don't use coordinate blinding when scalar is group order 2019-04-14 11:27:00 +02:00
ec_oct.c Deprecate the EC curve type specific functions in 1.2.0 2018-07-31 09:08:50 +01:00
ec_pmeth.c EVP module documentation pass 2018-10-17 13:31:59 +03:00
ec_print.c Update copyright year 2018-04-17 15:18:40 +02:00
ecdh_kdf.c EVP module documentation pass 2018-10-17 13:31:59 +03:00
ecdh_ossl.c Added NULL check to BN_clear() & BN_CTX_end() 2019-03-19 07:28:39 +01:00
ecdsa_ossl.c Use the new non-curve type specific EC functions internally 2018-07-31 09:08:38 +01:00
ecdsa_sign.c
ecdsa_vrf.c
eck_prn.c Update copyright year 2018-09-11 13:45:17 +01:00
ecp_mont.c SCA hardening for mod. field inversion in EC_GROUP 2019-02-20 19:54:19 +02:00
ecp_nist.c SCA hardening for mod. field inversion in EC_GROUP 2019-02-20 19:54:19 +02:00
ecp_nistp224.c SCA hardening for mod. field inversion in EC_GROUP 2019-02-20 19:54:19 +02:00
ecp_nistp256.c SCA hardening for mod. field inversion in EC_GROUP 2019-02-20 19:54:19 +02:00
ecp_nistp521.c Avoid an underflow in ecp_nistp521.c 2019-03-07 14:47:39 +00:00
ecp_nistputil.c
ecp_nistz256.c Added NULL check to BN_clear() & BN_CTX_end() 2019-03-19 07:28:39 +01:00
ecp_nistz256_table.c
ecp_oct.c Update copyright year 2018-09-11 13:45:17 +01:00
ecp_smpl.c Added NULL check to BN_clear() & BN_CTX_end() 2019-03-19 07:28:39 +01:00
ecx_meth.c Update copyright year 2019-02-26 14:05:09 +00:00