Skip to content
Commit 294d1e36 authored by Emilia Kasper's avatar Emilia Kasper
Browse files

RT3066: rewrite RSA padding checks to be slightly more constant time.



Also tweak s3_cbc.c to use new constant-time methods.
Also fix memory leaks from internal errors in RSA_padding_check_PKCS1_OAEP_mgf1

This patch is based on the original RT submission by Adam Langley <agl@chromium.org>,
as well as code from BoringSSL and OpenSSL.

Reviewed-by: default avatarKurt Roeckx <kurt@openssl.org>
parent 51b7be8d
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment