bn/asm/rsax-x86_64.pl: constant-time gather procedure.
authorAndy Polyakov <appro@openssl.org>
Mon, 25 Jan 2016 22:06:45 +0000 (23:06 +0100)
committerMatt Caswell <matt@openssl.org>
Tue, 1 Mar 2016 11:21:15 +0000 (11:21 +0000)
commitef98503eeef5c108018081ace902d28e609f7772
treeab0cfa9972c55a85ec45478bf75ed9d8423c0013
parent708dc2f1291e104fe4eef810bb8ffc1fae5b19c1
bn/asm/rsax-x86_64.pl: constant-time gather procedure.

Performance penalty is 2% on Linux and 5% on Windows.

CVE-2016-0702

Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Rich Salz <rsalz@openssl.org>
(cherry picked from master)
crypto/bn/asm/rsaz-x86_64.pl