GitLab

Signed-off-by: Simo Sorce <simo@redhat.com>

add a side-channel silent pkcs1 decoding function for use in older
APIs.
Signed-off-by: Simo Sorce <simo@redhat.com>

* testsuite/rsa-sec-decrypt-test.c (rsa_decrypt_for_test): Tweak
valgrind marking, and document potential leakage of lowest and
highest bits of p and q.

* rsa-sec-compute-root.c (_rsa_sec_compute_root): Avoid calls to
mpz_sizeinbase, since that potentially leaks most significant bits
of private key parameters a and b.

Signed-off-by: Simo Sorce <simo@redhat.com>

Use side-channel silent RSA root function as well as PKCS1 padding
functions.
This variant accepts only a fixed length message, and returns error
if the pkcs1 padding returns a different length message.
The buffer is always left unchanged on error so that a TLS
implementation can pre-initialize it with a random key to use on
decoding error.
Signed-off-by: Simo Sorce <simo@redhat.com>

Signed-off-by: Simo Sorce <simo@redhat.com>

Converts limbs to uint8_t buffer without conditional jumps.
Signed-off-by: Simo Sorce <simo@redhat.com>

Signed-off-by: Simo Sorce <simo@redhat.com>

Originally from Niels, with minor changes to avoid compiler warnings.

Signed-off-by: Simo Sorce <simo@redhat.com>

Signed-off-by: Simo Sorce <simo@redhat.com>

Returns number of limbs needed to contain N bytes long number.
Signed-off-by: Simo Sorce <simo@redhat.com>

* configure.ac: Bump package version to 3.4.1.
(LIBNETTLE_MINOR): Bump library version to 6.5.
(LIBHOGWEED_MINOR): Bump library version to 4.5.

(cherry picked from commit c4a814d7)

* aclocal.m4 (NETTLE_CHECK_IFUNC): fix quoting so that
  AC_LINK_IFELSE/AC_TRY_LINK is defined outside of this test.
Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
(cherry picked from commit e07e5605)

These are produced by Apple's Xcode 10 compiler.

(cherry picked from commit f3e2607f)

(cherry picked from commit c5fc9131)

(cherry picked from commit 20c7ba59)

(cherry picked from commit 71f68cc4)

(cherry picked from commit 7b4d6de8)

(cherry picked from commit f3bbc422)