kris/boringssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
2c45fa0b90
boringssl/crypto/bn
History
David Benjamin 783e095787 Recast ECDSA nonce hardening as DRBG additional data. 
FIPS 186-4 prescribes a particular ECDSA nonce selection algorithm,
implemented by BN_range_range_ex. Recast our nonce hardening mechanism
as additional data to be passed into the RBG during that algorithm.

Change-Id: Ic16a10cd58fd7deb7461f0c109a698ea80faff00
Reviewed-on: https://boringssl-review.googlesource.com/15046
Reviewed-by: Adam Langley <agl@google.com>
2017-04-14 20:44:37 +00:00
..
asm Enable RSA AVX2 code. 2017-03-08 17:28:12 +00:00
add.c Work around language and compiler bug in memcpy, etc. 2016-12-21 20:34:47 +00:00
bn_asn1.c
bn_test.cc Align BN_rand_range_ex with FIPS 186-4. 2017-04-14 19:49:49 +00:00
bn_tests.txt bn/asm/x86_64-mont5.pl: fix carry bug in bn_sqr8x_internal. 2017-01-26 18:29:44 +00:00
bn.c Remove BN_FLG_CONSTTIME. 2017-01-12 02:00:44 +00:00
check_bn_tests.go
CMakeLists.txt Remove rsaz-x86_64.pl from CMake inputs. 2016-12-19 08:39:37 -08:00
cmp.c Add BN_is_pow2, BN_mod_pow2, and BN_nnmod_pow2. 2017-02-09 22:40:12 +00:00
convert.c Add Little-endian BIGNUM conversions 2017-01-06 18:20:09 +00:00
ctx.c Work around language and compiler bug in memcpy, etc. 2016-12-21 20:34:47 +00:00
div.c Add BN_is_pow2, BN_mod_pow2, and BN_nnmod_pow2. 2017-02-09 22:40:12 +00:00
exponentiation.c Remove BN_FLG_CONSTTIME. 2017-01-12 02:00:44 +00:00
gcd.c Remove BN_FLG_CONSTTIME. 2017-01-12 02:00:44 +00:00
generic.c
internal.h Don't use BN_mod_inverse for inverses mod p in RSA keygen. 2017-01-04 13:56:11 +00:00
kronecker.c Fix BN_kronecker on unreachable BN_rshift error. 2016-12-12 21:40:20 +00:00
montgomery_inv.c Calculate Montgomery RR without division. 2016-12-16 17:41:01 +00:00
montgomery.c Avoid the error case in |bn_mul_mont|. 2017-03-07 23:30:13 +00:00
mul.c Work around language and compiler bug in memcpy, etc. 2016-12-21 20:34:47 +00:00
prime.c Update Miller-Rabin iterations to use FIPS specification. 2017-04-13 21:21:10 +00:00
random.c Recast ECDSA nonce hardening as DRBG additional data. 2017-04-14 20:44:37 +00:00
rsaz_exp.c Remove RSAZ-512. 2016-12-14 22:12:50 +00:00
rsaz_exp.h Remove RSAZ-512. 2016-12-14 22:12:50 +00:00
shift.c Work around language and compiler bug in memcpy, etc. 2016-12-21 20:34:47 +00:00
sqrt.c Remove direct calls to BN_mod_exp. 2017-02-28 18:00:02 +00:00