David Benjamin c7b6e0a664 Don't leak widths in bn_mod_mul_montgomery_fallback. ... The fallback functions still themselves leak, but I've left TODOs there. This only affects BN_mod_mul_montgomery on platforms where we don't use the bn_mul_mont assembly, but BN_mul additionally affects the final multiplication in RSA CRT. Bug: 232 Change-Id: Ia1ae16162c38e10c056b76d6b2afbed67f1a5e16 Reviewed-on: https://boringssl-review.googlesource.com/25260 Commit-Queue: David Benjamin <davidben@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> Reviewed-by: Adam Langley <agl@google.com>		2018-02-05 23:57:03 +00:00
..
asm
add.c
bn_test_to_fuzzer.go
bn_test.cc
bn_tests.txt
bn.c
bytes.c
check_bn_tests.go
cmp.c
ctx.c
div.c
exponentiation.c
gcd.c
generic.c
internal.h	Don't leak widths in bn_mod_mul_montgomery_fallback.	2018-02-05 23:57:03 +00:00
jacobi.c
montgomery_inv.c
montgomery.c	Don't leak widths in bn_mod_mul_montgomery_fallback.	2018-02-05 23:57:03 +00:00
mul.c	Don't leak widths in bn_mod_mul_montgomery_fallback.	2018-02-05 23:57:03 +00:00
prime.c
random.c
rsaz_exp.c
rsaz_exp.h
shift.c
sqrt.c