openssl/crypto/rsa
Bernd Edlinger 683403b344 Modify the RSA_private_decrypt functions to check the padding in
constant time with a memory access pattern that does not depend
on secret information.

[extended tests]

Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/8543)

(cherry picked from commit 9c0cf214e7)
2019-03-22 14:48:09 +01:00
..
build.info Support multi-prime RSA (RFC 8017) 2017-11-21 14:38:42 +08:00
rsa_ameth.c Fix cert with rsa instead of rsaEncryption as public key algorithm 2018-12-31 09:51:04 +01:00
rsa_asn1.c Support multi-prime RSA (RFC 8017) 2017-11-21 14:38:42 +08:00
rsa_chk.c rsa/rsa_gen.c: harmonize keygen's ability with RSA_security_bits. 2017-11-28 20:05:48 +01:00
rsa_crpt.c Remove unnecessary #include <openssl/lhash.h> directives. 2017-09-29 07:38:56 +10:00
rsa_depr.c
rsa_err.c Set error code on alloc failures 2018-04-03 11:31:16 -04:00
rsa_gen.c Added NULL check to BN_clear() & BN_CTX_end() 2019-03-19 07:28:39 +01:00
rsa_lib.c Safer memory cleanup in (crypto/rsa/rsa_lib.c) 2018-10-13 21:19:24 +08:00
rsa_locl.h Minor cleanup of the rsa mp limits code 2017-12-13 17:29:01 +01:00
rsa_meth.c Use 'i' as parameter name not 'I'. 2018-09-17 09:53:15 +10:00
rsa_mp.c Set error code on alloc failures 2018-04-03 11:31:16 -04:00
rsa_none.c Fix coding style in crypto/rsa directory 2017-08-25 16:23:07 +01:00
rsa_oaep.c Modify the RSA_private_decrypt functions to check the padding in 2019-03-22 14:48:09 +01:00
rsa_ossl.c Make err_clear_constant_time really constant time 2019-03-22 14:24:48 +01:00
rsa_pk1.c Modify the RSA_private_decrypt functions to check the padding in 2019-03-22 14:48:09 +01:00
rsa_pmeth.c Do the error handling in pkey_rsa_decrypt in constant time 2019-03-07 22:59:48 +01:00
rsa_prn.c Fix coding style in crypto/rsa directory 2017-08-25 16:23:07 +01:00
rsa_pss.c crypto/rsa/rsa_pss.c: silence coverity warning 2018-09-10 11:03:50 +01:00
rsa_saos.c This part fixes braces around if-else. 2017-08-25 16:23:07 +01:00
rsa_sign.c
rsa_ssl.c Modify the RSA_private_decrypt functions to check the padding in 2019-03-22 14:48:09 +01:00
rsa_x931.c This part fixes braces around if-else. 2017-08-25 16:23:07 +01:00
rsa_x931g.c Added NULL check to BN_clear() & BN_CTX_end() 2019-03-19 07:28:39 +01:00