RT3425: constant-time evp_enc
authorEmilia Kasper <emilia@openssl.org>
Fri, 5 Sep 2014 12:47:33 +0000 (14:47 +0200)
committerEmilia Kasper <emilia@openssl.org>
Wed, 24 Sep 2014 14:25:54 +0000 (16:25 +0200)
commitf2df488a1c7402e48c21c83e937955dfe9f40bee
tree9610c145d316b4594f39fbaf9852bec8856c11dc
parent8d507aee7c2d91aaa9b9142530d46d82f1a0139b
RT3425: constant-time evp_enc

Do the final padding check in EVP_DecryptFinal_ex in constant time to
avoid a timing leak from padding failure.

Reviewed-by: Rich Salz <rsalz@openssl.org>
(cherry picked from commit 4aac102f75b517bdb56b1bcfd0a856052d559f6e)

Conflicts:
crypto/evp/evp_enc.c

(cherry picked from commit 738911cde68b2b3706e502cf8daf5b14738f2f42)
crypto/evp/Makefile
crypto/evp/evp_enc.c