diff options
| author | tb <> | 2018-11-06 02:16:13 +0000 |
|---|---|---|
| committer | tb <> | 2018-11-06 02:16:13 +0000 |
| commit | d45a794dee47be1c2775b0914d6db527a52fc805 (patch) | |
| tree | b045e2d811dd314647f7b01462736f13f2eb6b97 | |
| parent | 2040275bab908960f255a8c01f793ac41a51b26b (diff) | |
| download | openbsd-d45a794dee47be1c2775b0914d6db527a52fc805.tar.gz openbsd-d45a794dee47be1c2775b0914d6db527a52fc805.tar.bz2 openbsd-d45a794dee47be1c2775b0914d6db527a52fc805.zip | |
disable EC_POINT coordinate blinding due to failures in ECDHE and TLS
| -rw-r--r-- | src/lib/libcrypto/ec/ecp_smpl.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/src/lib/libcrypto/ec/ecp_smpl.c b/src/lib/libcrypto/ec/ecp_smpl.c index 24054a51c5..d3fcd99670 100644 --- a/src/lib/libcrypto/ec/ecp_smpl.c +++ b/src/lib/libcrypto/ec/ecp_smpl.c | |||
| @@ -1,4 +1,4 @@ | |||
| 1 | /* $OpenBSD: ecp_smpl.c,v 1.25 2018/11/06 02:14:39 tb Exp $ */ | 1 | /* $OpenBSD: ecp_smpl.c,v 1.26 2018/11/06 02:16:13 tb Exp $ */ |
| 2 | /* Includes code written by Lenka Fibikova <fibikova@exp-math.uni-essen.de> | 2 | /* Includes code written by Lenka Fibikova <fibikova@exp-math.uni-essen.de> |
| 3 | * for the OpenSSL project. | 3 | * for the OpenSSL project. |
| 4 | * Includes code written by Bodo Moeller for the OpenSSL project. | 4 | * Includes code written by Bodo Moeller for the OpenSSL project. |
| @@ -1599,8 +1599,10 @@ ec_GFp_simple_mul_ct(const EC_GROUP *group, EC_POINT *r, const BIGNUM *scalar, | |||
| 1599 | * Apply coordinate blinding for EC_POINT if the underlying EC_METHOD | 1599 | * Apply coordinate blinding for EC_POINT if the underlying EC_METHOD |
| 1600 | * implements it. | 1600 | * implements it. |
| 1601 | */ | 1601 | */ |
| 1602 | #if 0 | ||
| 1602 | if (!ec_point_blind_coordinates(group, s, ctx)) | 1603 | if (!ec_point_blind_coordinates(group, s, ctx)) |
| 1603 | goto err; | 1604 | goto err; |
| 1605 | #endif | ||
| 1604 | 1606 | ||
| 1605 | /* top bit is a 1, in a fixed pos */ | 1607 | /* top bit is a 1, in a fixed pos */ |
| 1606 | if (!EC_POINT_copy(r, s)) | 1608 | if (!EC_POINT_copy(r, s)) |
