Timing vulnerability in DSA signature generation (CVE-2018-0734).
authorPauli <paul.dale@oracle.com>
Tue, 23 Oct 2018 21:42:46 +0000 (07:42 +1000)
committerPauli <paul.dale@oracle.com>
Sun, 28 Oct 2018 21:58:42 +0000 (07:58 +1000)
commit8abfe72e8c1de1b95f50aa0d9134803b4d00070f
tree69d5b3eb54d2704467f2a13306f1e573a8b29c3b
parentf1b12b8713a739f27d74e6911580b2e70aea2fa4
Timing vulnerability in DSA signature generation (CVE-2018-0734).

Avoid a timing attack that leaks information via a side channel that
triggers when a BN is resized.  Increasing the size of the BNs
prior to doing anything with them suppresses the attack.

Thanks due to Samuel Weiser for finding and locating this.

Reviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de>
(Merged from https://github.com/openssl/openssl/pull/7486)

(cherry picked from commit a9cfb8c2aa7254a4aa6a1716909e3f8cb78049b6)
crypto/dsa/dsa_ossl.c