Suyu/mbedtls
1
0
Fork 0
mirror of https://git.suyu.dev/suyu/mbedtls.git synced 2025-12-23 15:55:10 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Remove potential timing leak in ecdsa_sign()

Browse source
This commit is contained in:
Manuel Pégourié-Gonnard 2014-03-31 11:55:42 +02:00
parent 6b0d268bc9
commit dd75c3183b
3 changed files with 32 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

3
include/polarssl/ecp.h
View file

@ -118,6 +118,9 @@ ecp_point;
* short weierstrass, this subgroup is actually the whole curve, and its
* cardinal is denoted by N.
*
* In the case of Short Weierstrass curves, our code requires that N is an odd
* prime. (Use odd in ecp_mul() and prime in ecdsa_sign() for blinding.)
*
* In the case of Montgomery curves, we don't store A but (A + 2) / 4 which is
* the quantity actualy used in the formulas. Also, nbits is not the size of N
* but the required size for private keys.