rsa/rsa_ssl.c: make RSA_padding_check_SSLv23 constant-time.
authorAndy Polyakov <appro@openssl.org>
Fri, 14 Sep 2018 15:24:13 +0000 (17:24 +0200)
committerMatt Caswell <matt@openssl.org>
Fri, 30 Nov 2018 12:51:58 +0000 (12:51 +0000)
commitf1d91b89701627cc39e98987bc344aaae64f64fb
treed2e5601ce1bdcf64a09f46fcdaf4ccc63119fbe5
parentf5ebe54c00128d5ee0a28ba7f822a8d1b07e71e5
rsa/rsa_ssl.c: make RSA_padding_check_SSLv23 constant-time.

Copy of RSA_padding_check_PKCS1_type_2 with a twist that rejects padding
if nul delimiter is preceded by 8 consecutive 0x03 bytes.

Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(cherry picked from commit 603221407ddc6404f8c417c6beadebf84449074c)
crypto/rsa/rsa_ssl.c