Skip to content
  1. Feb 06, 2013
    • Ben Laurie's avatar
      Make CBC decoding constant time. · 2acc020b
      Ben Laurie authored
      This patch makes the decoding of SSLv3 and TLS CBC records constant
      time. Without this, a timing side-channel can be used to build a padding
      oracle and mount Vaudenay's attack.
      
      This patch also disables the stitched AESNI+SHA mode pending a similar
      fix to that code.
      
      In order to be easy to backport, this change is implemented in ssl/,
      rather than as a generic AEAD mode. In the future this should be changed
      around so that HMAC isn't in ssl/, but crypto/ as FIPS expects.
      (cherry picked from commit e130841b)
      2acc020b
    • Ben Laurie's avatar
      Add and use a constant-time memcmp. · 7c770d57
      Ben Laurie authored
      This change adds CRYPTO_memcmp, which compares two vectors of bytes in
      an amount of time that's independent of their contents. It also changes
      several MAC compares in the code to use this over the standard memcmp,
      which may leak information about the size of a matching prefix.
      (cherry picked from commit 2ee798880a246d648ecddadc5b91367bee4a5d98)
      7c770d57
  2. Feb 04, 2013
  3. Feb 02, 2013
  4. Jan 24, 2013
  5. Jan 23, 2013
  6. Jan 22, 2013
  7. Jan 21, 2013
  8. Jan 20, 2013
  9. Jan 19, 2013
  10. Jan 17, 2013
  11. Jan 13, 2013
  12. Jan 12, 2013
  13. Jan 07, 2013
  14. Jan 06, 2013
  15. Dec 30, 2012
  16. Dec 29, 2012
  17. Dec 26, 2012