From 9a561f2327a3e6b5ee853e60427012bfe6e02043 Mon Sep 17 00:00:00 2001
From: beck <>
Date: Sat, 21 Jan 2017 11:00:47 +0000
Subject: Add ct and nonct versions of BN_mod_inverse for internal use ok
 jsing@

---
 src/lib/libcrypto/ecdsa/ecs_ossl.c | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

(limited to 'src/lib/libcrypto/ecdsa/ecs_ossl.c')

diff --git a/src/lib/libcrypto/ecdsa/ecs_ossl.c b/src/lib/libcrypto/ecdsa/ecs_ossl.c
index 26158a001b..637da6535f 100644
--- a/src/lib/libcrypto/ecdsa/ecs_ossl.c
+++ b/src/lib/libcrypto/ecdsa/ecs_ossl.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ecs_ossl.c,v 1.7 2017/01/05 13:25:52 jsing Exp $ */
+/* $OpenBSD: ecs_ossl.c,v 1.8 2017/01/21 11:00:47 beck Exp $ */
 /*
  * Written by Nils Larsch for the OpenSSL project
  */
@@ -58,11 +58,13 @@
 
 #include <openssl/opensslconf.h>
 
-#include "ecs_locl.h"
 #include <openssl/err.h>
 #include <openssl/obj_mac.h>
 #include <openssl/bn.h>
 
+#include "bn_lcl.h"
+#include "ecs_locl.h"
+
 static ECDSA_SIG *ecdsa_do_sign(const unsigned char *dgst, int dlen,
     const BIGNUM *, const BIGNUM *, EC_KEY *eckey);
 static int ecdsa_sign_setup(EC_KEY *eckey, BN_CTX *ctx_in, BIGNUM **kinvp,
@@ -176,7 +178,7 @@ ecdsa_sign_setup(EC_KEY *eckey, BN_CTX *ctx_in, BIGNUM **kinvp, BIGNUM **rp)
 	} while (BN_is_zero(r));
 
 	/* compute the inverse of k */
-	if (!BN_mod_inverse(k, k, order, ctx)) {
+	if (!BN_mod_inverse_ct(k, k, order, ctx)) {
 		ECDSAerr(ECDSA_F_ECDSA_SIGN_SETUP, ERR_R_BN_LIB);
 		goto err;
 	}
@@ -360,7 +362,7 @@ ecdsa_do_verify(const unsigned char *dgst, int dgst_len, const ECDSA_SIG *sig,
 		goto err;
 	}
 	/* calculate tmp1 = inv(S) mod order */
-	if (!BN_mod_inverse(u2, sig->s, order, ctx)) {
+	if (!BN_mod_inverse_ct(u2, sig->s, order, ctx)) {
 		ECDSAerr(ECDSA_F_ECDSA_DO_VERIFY, ERR_R_BN_LIB);
 		goto err;
 	}
-- 
cgit v1.2.3-55-g6feb