rsa/rsa_ssl.c: make RSA_padding_check_SSLv23 constant-time.
authorAndy Polyakov <appro@openssl.org>
Fri, 14 Sep 2018 15:24:13 +0000 (17:24 +0200)
committerMatt Caswell <matt@openssl.org>
Fri, 30 Nov 2018 12:32:25 +0000 (12:32 +0000)
commit603221407ddc6404f8c417c6beadebf84449074c
treeb5259a42d451573a3a8231f26f7421936f70f23c
parent75f5e944be97f28867e7c489823c889d89d0bd06
rsa/rsa_ssl.c: make RSA_padding_check_SSLv23 constant-time.

Copy of RSA_padding_check_PKCS1_type_2 with a twist that rejects padding
if nul delimiter is preceded by 8 consecutive 0x03 bytes.

Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
crypto/rsa/rsa_ssl.c