RT3425: constant-time evp_enc
authorEmilia Kasper <emilia@openssl.org>
Fri, 5 Sep 2014 12:47:33 +0000 (14:47 +0200)
committerJanusz Kozerski <j.kozerski@samsung.com>
Mon, 20 Oct 2014 13:26:05 +0000 (15:26 +0200)
commit92577784c1835d48eff647467182bb78c79448c5
tree1205ef2e6c7e8e2eb35003e2e3a6248b39380ab4
parent36abfeb853536562e4b4d60cc98209217eab063a
RT3425: constant-time evp_enc

Do the final padding check in EVP_DecryptFinal_ex in constant time to
avoid a timing leak from padding failure.

Reviewed-by: Rich Salz <rsalz@openssl.org>
(cherry picked from commit 4aac102f75b517bdb56b1bcfd0a856052d559f6e)

Conflicts:
crypto/evp/evp_enc.c

(cherry picked from commit 738911cde68b2b3706e502cf8daf5b14738f2f42)
crypto/evp/Makefile
crypto/evp/evp_enc.c