mbedtls/library
Janos Follath b764ee1603 mpi_exp_mod: protect out of window zeroes
Out of window zeroes were doing squaring on the output variable
directly. This leaks the position of windows and the out of window
zeroes.

Loading the output variable from the table in constant time removes this
leakage.

Signed-off-by: Janos Follath <janos.follath@arm.com>
2022-11-22 15:04:10 +00:00
..
.gitignore
aes.c Redo of PR#5345. Fixed spelling and typographical errors found by CodeSpell. 2022-05-11 21:25:51 +01:00
aesni.c
aesni.h
aria.c
asn1parse.c
asn1write.c Fix bug whereby 0 was written as 0200 rather than 020100 2022-06-10 20:13:33 +02:00
base64.c
bignum.c mpi_exp_mod: protect out of window zeroes 2022-11-22 15:04:10 +00:00
bignum_internal.h
bn_mul.h
camellia.c
ccm.c Fix typos in documentation and constants with typo finding tool 2022-05-18 14:15:33 -04:00
chacha20.c
chachapoly.c
check_crypto_config.h
cipher.c Deprecate mbedtls_cipher_setup_psa() 2022-05-06 10:55:10 +02:00
cipher_wrap.c
cipher_wrap.h
cmac.c
CMakeLists.txt Bump version to 3.2.1 2022-07-12 10:51:55 +01:00
common.h
constant_time.c Merge pull request #5829 from paul-elliott-arm/fix_ct_uninit_memory_access 2022-06-01 11:42:51 +02:00
constant_time_internal.h Fix uninitialised memory access in constant time functions 2022-05-19 18:23:24 +01:00
constant_time_invasive.h
ctr_drbg.c Merge pull request #952 from gilles-peskine-arm/stdio_buffering-setbuf 2022-07-04 10:12:22 +01:00
debug.c
des.c
dhm.c Call setbuf when reading or writing files: library 2022-06-30 17:03:40 +02:00
ecdh.c Fix typos in documentation and constants with typo finding tool 2022-05-18 14:15:33 -04:00
ecdsa.c
ecjpake.c Redo of PR#5345. Fixed spelling and typographical errors found by CodeSpell. 2022-05-11 21:25:51 +01:00
ecp.c Merge pull request #5766 from leorosen/fix-var-init 2022-05-16 14:47:00 +01:00
ecp_curves.c Since the group is unloaded for all curves, it is better to initialize the group also for all curves. 2022-05-06 18:43:58 +02:00
ecp_internal_alt.h
ecp_invasive.h
entropy.c Call setbuf when reading or writing files: library 2022-06-30 17:03:40 +02:00
entropy_poll.c Call setbuf when reading or writing files: library 2022-06-30 17:03:40 +02:00
entropy_poll.h
gcm.c Add missing local variable initialization 2022-05-13 18:08:11 +01:00
hkdf.c
hmac_drbg.c Call setbuf when reading or writing files: library 2022-06-30 17:03:40 +02:00
Makefile Bump library and so versions for 3.2.0 release 2022-07-11 13:56:01 +01:00
md.c Call setbuf when reading or writing files: library 2022-06-30 17:03:40 +02:00
md5.c
md_wrap.h
memory_buffer_alloc.c Redo of PR#5345. Fixed spelling and typographical errors found by CodeSpell. 2022-05-11 21:25:51 +01:00
mps_common.h Fix typos in documentation and constants with typo finding tool 2022-05-18 14:15:33 -04:00
mps_error.h
mps_reader.c
mps_reader.h
mps_trace.c
mps_trace.h
net_sockets.c
nist_kw.c
oid.c
padlock.c
padlock.h
pem.c
pk.c Check when usage == 0 in mbedtls_pk_can_do_ext() 2022-05-20 09:26:16 +02:00
pk_wrap.c Guard pk_opaque_rsa_decrypt() with PSA_WANT_KEY_TYPE_RSA_KEY_PAIR 2022-05-04 11:02:37 +02:00
pk_wrap.h Guard pk_opaque_rsa_decrypt() with PSA_WANT_KEY_TYPE_RSA_KEY_PAIR 2022-05-04 11:02:37 +02:00
pkcs5.c
pkcs12.c Add missing local variable initialization 2022-05-13 18:08:11 +01:00
pkparse.c Merge remote-tracking branch 'mbedtls-restricted/development-restricted' into mbedtls-3.2.0rc0-pr 2022-07-11 10:22:37 +02:00
pkwrite.c
pkwrite.h
platform.c Fix code formatting 2022-07-01 16:43:25 +01:00
platform_util.c Add comment 2022-05-12 09:45:03 +01:00
poly1305.c
psa_crypto.c Merge pull request #5834 from mprse/HKDF_1 2022-06-20 15:27:46 +02:00
psa_crypto_aead.c
psa_crypto_aead.h Redo of PR#5345. Fixed spelling and typographical errors found by CodeSpell. 2022-05-11 21:25:51 +01:00
psa_crypto_cipher.c
psa_crypto_cipher.h
psa_crypto_client.c
psa_crypto_core.h
psa_crypto_driver_wrappers.h
psa_crypto_ecp.c
psa_crypto_ecp.h
psa_crypto_hash.c
psa_crypto_hash.h Redo of PR#5345. Fixed spelling and typographical errors found by CodeSpell. 2022-05-11 21:25:51 +01:00
psa_crypto_invasive.h
psa_crypto_its.h
psa_crypto_mac.c
psa_crypto_mac.h
psa_crypto_random_impl.h
psa_crypto_rsa.c
psa_crypto_rsa.h
psa_crypto_se.c
psa_crypto_se.h
psa_crypto_slot_management.c
psa_crypto_slot_management.h
psa_crypto_storage.c
psa_crypto_storage.h
psa_its_file.c Call setbuf when reading or writing files: library 2022-06-30 17:03:40 +02:00
ripemd160.c
rsa.c Merge pull request #5766 from leorosen/fix-var-init 2022-05-16 14:47:00 +01:00
rsa_alt_helpers.c
rsa_alt_helpers.h
sha1.c
sha256.c Hide unnecessarily public functions in SHA-256 and SHA-512 A64 acceleration 2022-04-19 13:52:24 +01:00
sha512.c Hide unnecessarily public functions in SHA-256 and SHA-512 A64 acceleration 2022-04-19 13:52:24 +01:00
ssl_cache.c Merge remote-tracking branch 'mbedtls-restricted/development-restricted' into mbedtls-3.2.0rc0-pr 2022-07-11 10:22:37 +02:00
ssl_ciphersuites.c Merge remote-tracking branch 'mbedtls-restricted/development-restricted' into mbedtls-3.2.0rc0-pr 2022-07-11 10:22:37 +02:00
ssl_client.c Mark static int SSL functions CHECK_RETURN_CRITICAL 2022-06-20 21:12:52 +02:00
ssl_client.h Mark internal int SSL functions CHECK_RETURN_CRITICAL 2022-06-20 21:12:55 +02:00
ssl_cookie.c Mark static int SSL functions CHECK_RETURN_CRITICAL 2022-06-20 21:12:52 +02:00
ssl_debug_helpers.h add named group debug helper 2022-05-09 15:49:00 +08:00
ssl_misc.h Merge remote-tracking branch 'mbedtls-restricted/development-restricted' into mbedtls-3.2.0rc0-pr 2022-07-11 10:22:37 +02:00
ssl_msg.c Merge remote-tracking branch 'mbedtls-restricted/development-restricted' into mbedtls-3.2.0rc0-pr 2022-07-11 10:22:37 +02:00
ssl_ticket.c Mark static int SSL functions CHECK_RETURN_CRITICAL 2022-06-20 21:12:52 +02:00
ssl_tls.c Merge remote-tracking branch 'mbedtls-restricted/development-restricted' into mbedtls-3.2.0rc0-pr 2022-07-11 10:22:37 +02:00
ssl_tls12_client.c Merge remote-tracking branch 'mbedtls-restricted/development-restricted' into mbedtls-3.2.0rc0-pr 2022-07-11 10:22:37 +02:00
ssl_tls12_server.c Ensure return for mbedtls_ssl_write_alpn_ext() is checked 2022-07-11 12:37:47 +01:00
ssl_tls13_client.c Merge remote-tracking branch 'mbedtls-restricted/development-restricted' into mbedtls-3.2.0rc0-pr 2022-07-11 10:22:37 +02:00
ssl_tls13_generic.c Merge remote-tracking branch 'mbedtls-restricted/development-restricted' into mbedtls-3.2.0rc0-pr 2022-07-11 10:22:37 +02:00
ssl_tls13_invasive.h Merge remote-tracking branch 'mbedtls-restricted/development-restricted' into mbedtls-3.2.0rc0-pr 2022-07-11 10:22:37 +02:00
ssl_tls13_keys.c Merge remote-tracking branch 'mbedtls-restricted/development-restricted' into mbedtls-3.2.0rc0-pr 2022-07-11 10:22:37 +02:00
ssl_tls13_keys.h Mark internal int SSL functions CHECK_RETURN_CRITICAL 2022-06-20 21:12:55 +02:00
ssl_tls13_server.c Merge remote-tracking branch 'mbedtls-restricted/development-restricted' into mbedtls-3.2.0rc0-pr 2022-07-11 10:22:37 +02:00
threading.c
timing.c
version.c
x509.c Merge pull request #5980 from mprse/md_dep_fix 2022-06-29 10:18:41 +02:00
x509_create.c
x509_crl.c
x509_crt.c
x509_csr.c
x509write_crt.c Use ASN1 UTC tags for dates before 2000 2022-06-01 16:24:28 +01:00
x509write_csr.c