boringssl/crypto/fipsmodule/bn/asm
David Benjamin f6d9f0b58e bn/asm/*-mont.pl: fix memory access pattern in final subtraction.
Montgomery multiplication post-conditions in some of code paths were
formally non-constant time. Cache access pattern was result-neutral,
but a little bit asymmetric, which might have produced a signal [if
processor reordered load and stores at run-time].

(Imported from upstream's 774ff8fed67e19d4f5f0df2f59050f2737abab2a.)

Change-Id: I77443fb79242b77e704c34d69f1de9e3162e9538
Reviewed-on: https://boringssl-review.googlesource.com/27987
Reviewed-by: Adam Langley <agl@google.com>
2018-05-03 23:21:22 +00:00
..
armv4-mont.pl
armv8-mont.pl
bn-586.pl
co-586.pl
rsaz-avx2.pl
x86_64-gcc.c
x86_64-mont5.pl
x86_64-mont.pl
x86-mont.pl