boringssl/crypto/bn
Adam Langley eceb33d3af bignum: fix boundary condition in montgomery logic
It's not clear whether this inconsistency could lead to an actual
computation error, but it involved a BIGNUM being passed around the
montgomery logic in an inconsistent state. This was found using flags
-DBN_DEBUG -DBN_DEBUG_RAND, and working backwards from this assertion
in 'ectest';

ectest: bn_mul.c:960: BN_mul: Assertion `(_bnum2->top == 0) ||
(_bnum2->d[_bnum2->top - 1] != 0)' failed

(Imported from upstream's 3cc546a3bbcbf26cd14fc45fb133d36820ed0a75)
2014-06-20 13:17:40 -07:00
..
asm Add needed volatile qualifications. 2014-06-20 13:17:33 -07:00
add.c Inital import. 2014-06-20 13:17:32 -07:00
bn_error.c Add function to recover RSA CRT params. 2014-06-20 13:17:35 -07:00
bn_test.c Improvements in constant-time OAEP decoding. 2014-06-20 13:17:37 -07:00
bn.c Inital import. 2014-06-20 13:17:32 -07:00
bn.h Improvements in constant-time OAEP decoding. 2014-06-20 13:17:37 -07:00
CMakeLists.txt Inital import. 2014-06-20 13:17:32 -07:00
cmp.c Inital import. 2014-06-20 13:17:32 -07:00
convert.c Improvements in constant-time OAEP decoding. 2014-06-20 13:17:37 -07:00
ctx.c Inital import. 2014-06-20 13:17:32 -07:00
div.c Check for invalid divisors in BN_div. 2014-06-20 13:17:33 -07:00
exponentiation.c bignum: fix boundary condition in montgomery logic 2014-06-20 13:17:40 -07:00
gcd.c Inital import. 2014-06-20 13:17:32 -07:00
generic.c Inital import. 2014-06-20 13:17:32 -07:00
internal.h Inital import. 2014-06-20 13:17:32 -07:00
kronecker.c Inital import. 2014-06-20 13:17:32 -07:00
montgomery.c Inital import. 2014-06-20 13:17:32 -07:00
mul.c Inital import. 2014-06-20 13:17:32 -07:00
prime.c Small prime generation. 2014-06-20 13:17:34 -07:00
random.c Safe (EC)DSA nonces. 2014-06-20 13:17:33 -07:00
rsaz_exp.c Inital import. 2014-06-20 13:17:32 -07:00
rsaz_exp.h Inital import. 2014-06-20 13:17:32 -07:00
shift.c Inital import. 2014-06-20 13:17:32 -07:00
sqrt.c Add function to recover RSA CRT params. 2014-06-20 13:17:35 -07:00