[go: nahoru, domu]
Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Avoid BN reallocations #7486

Closed
wants to merge 2 commits into from
Closed

Avoid BN reallocations #7486

wants to merge 2 commits into from

Commits on Oct 28, 2018

  1. Timing vulnerability in DSA signature generation (CVE-2018-0734). 

    Avoid a timing attack that leaks information via a side channel that
triggers when a BN is resized.  Increasing the size of the BNs
prior to doing anything with them suppresses the attack.

Thanks due to Samuel Weiser for finding and locating this.
    @paulidale
    paulidale committed Oct 28, 2018
    Configuration menu
    Copy the full SHA
    1d40153 View commit details
    Browse the repository at this point in the history

  2. Timing vulnerability in ECDSA signature generation (CVE-2018-0735) 

    Preallocate an extra limb for some of the big numbers to avoid a reallocation
that can potentially provide a side channel.
    @paulidale
    paulidale committed Oct 28, 2018
    Configuration menu
    Copy the full SHA
    5dcfd18 View commit details
    Browse the repository at this point in the history