Commit 880d1c76 authored by Pauli's avatar Pauli
Browse files

Add a constant time flag to one of the bignums to avoid a timing leak. 



Reviewed-by: default avatarTim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/7549)

(cherry picked from commit 00496b64)
parent ebf65dbe

crypto/dsa/dsa_ossl.c

+1 −1
Original line number Diff line number Diff line
@@ -295,9 +295,9 @@ static int dsa_sign_setup(DSA *dsa, BN_CTX *ctx_in, BIGNUM **kinvp, 


    if ((dsa->flags & DSA_FLAG_NO_EXP_CONSTTIME) == 0) {

        BN_set_flags(&k, BN_FLG_CONSTTIME);

        BN_set_flags(&l, BN_FLG_CONSTTIME);

    }





    if (dsa->flags & DSA_FLAG_CACHE_MONT_P) {

        if (!BN_MONT_CTX_set_locked(&dsa->method_mont_p,

                                    CRYPTO_LOCK_DSA, dsa->p, ctx))