RSA key generation: ensure BN_mod_inverse and BN_mod_exp_mont both get called with...
authorMatt Caswell <matt@openssl.org>
Thu, 12 Apr 2018 11:07:53 +0000 (12:07 +0100)
committerMatt Caswell <matt@openssl.org>
Mon, 16 Apr 2018 15:14:57 +0000 (16:14 +0100)
commit54f007af94b8924a46786b34665223c127c19081
treeea56ebf51aa195ff954de8f713578353acb9e287
parentb0a97931fbfd5c84e1ac031cb8a8d213d437fec5
RSA key generation: ensure BN_mod_inverse and BN_mod_exp_mont both get called with BN_FLG_CONSTTIME flag set.

Based on an original patch by Billy Brumley

CVE-2018-0737

Reviewed-by: Rich Salz <rsalz@openssl.org>
crypto/rsa/rsa_gen.c