summaryrefslogtreecommitdiff
path: root/src/lib/libcrypto/dsa/dsa_ossl.c
diff options
context:
space:
mode:
Diffstat (limited to 'src/lib/libcrypto/dsa/dsa_ossl.c')
-rw-r--r--src/lib/libcrypto/dsa/dsa_ossl.c25
1 files changed, 6 insertions, 19 deletions
diff --git a/src/lib/libcrypto/dsa/dsa_ossl.c b/src/lib/libcrypto/dsa/dsa_ossl.c
index 943d038796..c53c8b9001 100644
--- a/src/lib/libcrypto/dsa/dsa_ossl.c
+++ b/src/lib/libcrypto/dsa/dsa_ossl.c
@@ -1,4 +1,4 @@
1/* $OpenBSD: dsa_ossl.c,v 1.55 2024/05/09 20:57:49 tb Exp $ */ 1/* $OpenBSD: dsa_ossl.c,v 1.56 2024/05/11 06:43:50 tb Exp $ */
2/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) 2/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
3 * All rights reserved. 3 * All rights reserved.
4 * 4 *
@@ -268,15 +268,8 @@ dsa_sign_setup(DSA *dsa, BN_CTX *ctx_in, BIGNUM **kinvp, BIGNUM **rp)
268 !bn_copy(k, BN_num_bits(l) > q_bits ? l : m)) 268 !bn_copy(k, BN_num_bits(l) > q_bits ? l : m))
269 goto err; 269 goto err;
270 270
271 if (dsa->meth->bn_mod_exp != NULL) { 271 if (!BN_mod_exp_mont_ct(r, dsa->g, k, dsa->p, ctx, dsa->method_mont_p))
272 if (!dsa->meth->bn_mod_exp(dsa, r, dsa->g, k, dsa->p, ctx, 272 goto err;
273 dsa->method_mont_p))
274 goto err;
275 } else {
276 if (!BN_mod_exp_mont_ct(r, dsa->g, k, dsa->p, ctx,
277 dsa->method_mont_p))
278 goto err;
279 }
280 273
281 if (!BN_mod_ct(r, r, dsa->q, ctx)) 274 if (!BN_mod_ct(r, r, dsa->q, ctx))
282 goto err; 275 goto err;
@@ -372,15 +365,9 @@ dsa_do_verify(const unsigned char *dgst, int dgst_len, DSA_SIG *sig, DSA *dsa)
372 goto err; 365 goto err;
373 } 366 }
374 367
375 if (dsa->meth->dsa_mod_exp != NULL) { 368 if (!BN_mod_exp2_mont(t1, dsa->g, u1, dsa->pub_key, u2, dsa->p,
376 if (!dsa->meth->dsa_mod_exp(dsa, t1, dsa->g, u1, dsa->pub_key, 369 ctx, mont))
377 u2, dsa->p, ctx, mont)) 370 goto err;
378 goto err;
379 } else {
380 if (!BN_mod_exp2_mont(t1, dsa->g, u1, dsa->pub_key, u2,
381 dsa->p, ctx, mont))
382 goto err;
383 }
384 371
385 /* let u1 = u1 mod q */ 372 /* let u1 = u1 mod q */
386 if (!BN_mod_ct(u1, t1, dsa->q, ctx)) 373 if (!BN_mod_ct(u1, t1, dsa->q, ctx))