projects
/
platform
/
upstream
/
openssl.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(parent:
6d0cfc5
)
RSA key generation: ensure BN_mod_inverse and BN_mod_exp_mont both get called with...
49/183449/1
author
Billy Brumley
<bbrumley@gmail.com>
Wed, 11 Apr 2018 07:10:58 +0000
(10:10 +0300)
committer
Dariusz Michaluk
<d.michaluk@samsung.com>
Thu, 5 Jul 2018 11:46:30 +0000
(13:46 +0200)
CVE-2018-0737
Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(cherry picked from commit
6939eab03a6e23d2bd2c3f5e34fe1d48e542e787
)
Change-Id: I7ff51315e409dd39d6e0e9174d43d3221940bed2
crypto/rsa/rsa_gen.c
patch
|
blob
|
history
diff --git
a/crypto/rsa/rsa_gen.c
b/crypto/rsa/rsa_gen.c
index
9ca5dfe
..
42b89a8
100644
(file)
--- a/
crypto/rsa/rsa_gen.c
+++ b/
crypto/rsa/rsa_gen.c
@@
-156,6
+156,8
@@
static int rsa_builtin_keygen(RSA *rsa, int bits, BIGNUM *e_value,
if (BN_copy(rsa->e, e_value) == NULL)
goto err;
+ BN_set_flags(rsa->p, BN_FLG_CONSTTIME);
+ BN_set_flags(rsa->q, BN_FLG_CONSTTIME);
BN_set_flags(r2, BN_FLG_CONSTTIME);
/* generate p and q */
for (;;) {