bn/asm/rsax-x86_64.pl: constant-time gather procedure.
authorAndy Polyakov <appro@openssl.org>
Mon, 25 Jan 2016 22:06:45 +0000 (23:06 +0100)
committerMatt Caswell <matt@openssl.org>
Tue, 1 Mar 2016 13:34:22 +0000 (13:34 +0000)
commit5ea08bd2fe6538cbccd89f07e6f1cdd5d3e75e3f
tree8e800c4ce937ca007af38ddb0915667a27b79f75
parentd6482a82bc2228327aa4ba98aeeecd9979542a31
bn/asm/rsax-x86_64.pl: constant-time gather procedure.

Performance penalty is 2% on Linux and 5% on Windows.

CVE-2016-0702

Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Rich Salz <rsalz@openssl.org>
crypto/bn/asm/rsaz-x86_64.pl