openbsd/src/lib/libcrypto/bn, branch libressl-v2.5.0 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.5.0 2016-09-04T14:31:29+00:00 Less S390. 2016-09-04T14:31:29+00:00 jsing 2016-09-04T14:31:29+00:00 urn:sha1:d613aa0d6ef93fa8587113d3e866da6c582bdd0d ok deraadt@ Less IA64. 2016-09-04T14:06:46+00:00 jsing 2016-09-04T14:06:46+00:00 urn:sha1:08b60d422d5acc1a98c47af6c53680ea9cc45bc2 ok deraadt@ switch to a constant-time gather procedure for amd64 mont5 asm 2016-09-03T17:33:16+00:00 bcook 2016-09-03T17:33:16+00:00 urn:sha1:a368cc5f567b4a1e50fb42285f6e14eb04a5aa87 from OpenSSL commit 7f98aa7403a1244cf17d1aa489f5bb0f39bae431 CVE-2016-0702 ok beck@ add constant-time MOD_EXP_CTIME_COPY_FROM_PREBUF. 2016-09-03T17:26:29+00:00 bcook 2016-09-03T17:26:29+00:00 urn:sha1:b4ded23bb909c13a8816bec41389b6a343fba9db Patch based on OpenSSL commit d7a854c055ff22fb7da80c3b0e7cb08d248591d0 "Performance penalty varies from platform to platform, and even key length. For rsa2048 sign it was observed to reach almost 10%." CVE-2016-0702 ok beck@ BN_mod_exp_mont_consttime: check for zero modulus. 2016-09-03T17:21:38+00:00 bcook 2016-09-03T17:21:38+00:00 urn:sha1:a1bddd1baaaf2f6eb4754140425b09a3b301210f Don't dereference d when top is zero. Original patch from OpenSSL commit d46e946d2603c64df6e1e4f9db0c70baaf1c4c03 ok jsing@ BN_mod_exp_mont_consttime: check for zero modulus. 2016-09-03T14:37:52+00:00 bcook 2016-09-03T14:37:52+00:00 urn:sha1:f826e0ef7a6d62b2aaaf3475bc001f300d6cd832 Don't dereference |d| when |top| is zero. Also test that various BIGNUM methods behave correctly on zero/even inputs. Original patch from OpenSSL commit d46e946d2603c64df6e1e4f9db0c70baaf1c4c03 Avoid undefined-behavior right-shifting by a word-size # of bits. 2016-09-03T14:37:00+00:00 bcook 2016-09-03T14:37:00+00:00 urn:sha1:9aae90b064d0298d40b2d795728a6e1dbb721db5 Found with STACK, originally from OpenSSL, ok @beck don't mix code and decls, ok tedu@ 2016-07-18T01:04:52+00:00 bcook 2016-07-18T01:04:52+00:00 urn:sha1:c7c0c4b1ecb389c009d446c6c9253677915896dc use memset to initialize the union 2016-07-17T22:01:01+00:00 bcook 2016-07-17T22:01:01+00:00 urn:sha1:c5ec86df737ed666779cf51e5f3a89a62397e0de Initialize buffers before use, noted by Kinichiro Inoguchi. 2016-07-17T21:21:40+00:00 bcook 2016-07-17T21:21:40+00:00 urn:sha1:fdee4729e12ac97473d08c1a7e9d17c5468fe82c ok beck@