Replaced variable-time GCD with consttime inversion to avoid side-channel attacks...
authorSamuel Weiser <samuel.weiser@iaik.tugraz.at>
Wed, 21 Feb 2018 11:56:01 +0000 (11:56 +0000)
committerMatt Caswell <matt@openssl.org>
Wed, 21 Feb 2018 11:56:44 +0000 (11:56 +0000)
commit8db7946ee879ce483f4c81141926e1357aa6b941
treed140b78aa25a32d5ae7e0f8d8b52d85674090036
parentee763495250b29fd32cb4026f17678ba30a59342
Replaced variable-time GCD with consttime inversion to avoid side-channel attacks on RSA key generation

Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Kurt Roeckx <kurt@roeckx.be>
(Merged from https://github.com/openssl/openssl/pull/5161)
crypto/rsa/rsa_gen.c