diff options
| author | Sohaib ul Hassan <sohaibulhassan@tuni.fi> | 2020-07-09 18:51:51 +0000 |
|---|---|---|
| committer | Moonchild <moonchild@palemoon.org> | 2021-03-15 18:40:01 +0000 |
| commit | 56d673981972c43f3fa19058832b0512c8eb5c48 (patch) | |
| tree | f17610f29f74acd226d491d9a8121465c663b243 /security/nss/gtests/freebl_gtest | |
| parent | 009292e2779368f7e42f2050cc6257bcbaabbbbd (diff) | |
| download | aura-central-56d673981972c43f3fa19058832b0512c8eb5c48.tar.gz | |
[NSS] Implement constant-time GCD and modular inversion
The implementation is based on the work by Bernstein and Yang
(https://eprint.iacr.org/2019/266)
"Fast constant-time gcd computation and modular inversion".
It fixes the old mp_gcd and s_mp_invmod_odd_m functions. The patch also fixes
mpl_significant_bits s_mp_div_2d and s_mp_mul_2d by having less control flow to
reduce side-channel leaks.
Co-authored by : Billy Bob Brumley
Diffstat (limited to 'security/nss/gtests/freebl_gtest')
0 files changed, 0 insertions, 0 deletions