generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

bn_mont.c fix [from HEAD].

Browse Source
This commit is contained in:
Andy Polyakov 2007-06-29 13:12:34 +00:00
parent 8dd8ce1dc3
commit a166e96d16
1 changed files with 17 additions and 23 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
crypto/bn/bn_mont.c
View File

@ -246,18 +246,12 @@ int BN_from_montgomery(BIGNUM *ret, const BIGNUM *a, BN_MONT_CTX *mont,
rp=ret->d; rp=ret->d;
ap=&(r->d[ri]); ap=&(r->d[ri]);
nrp=ap;
/* This 'if' denotes violation of 2*M<r^(n-1) boundary condition
* formulated by C.D.Walter in "Montgomery exponentiation needs
* no final subtractions." Incurred branch can disclose only
* information about modulus length, which is not really secret. */
if ((mont->N.d[ri-1]>>(BN_BITS2-2))!=0)
{ {
size_t m1,m2; size_t m1,m2;
v=bn_sub_words(rp,ap,mont->N.d,ri); v=bn_sub_words(rp,ap,np,ri);
/* this -----------------------^^ works even in al<ri case /* this ----------------^^ works even in al<ri case
* thanks to zealous zeroing of top of the vector in the * thanks to zealous zeroing of top of the vector in the
* beginning. */ * beginning. */