Emilia Kasper 904fcce0c6 RT3066: rewrite RSA padding checks to be slightly more constant time.
Also tweak s3_cbc.c to use new constant-time methods.
Also fix memory leaks from internal errors in RSA_padding_check_PKCS1_OAEP_mgf1

This patch is based on the original RT submission by Adam Langley <agl@chromium.org>,
as well as code from BoringSSL and OpenSSL.

Reviewed-by: Kurt Roeckx <kurt@openssl.org>

Conflicts:
	crypto/rsa/rsa_oaep.c
2014-09-24 14:35:03 +02:00
..
2010-01-16 13:32:14 +00:00
2002-08-15 22:06:00 +00:00
2009-04-27 19:31:52 +00:00
2005-03-30 21:37:05 +00:00
1999-03-22 12:22:14 +00:00
2014-01-10 23:03:47 +00:00
2009-04-16 17:22:51 +00:00
2005-07-16 12:37:36 +00:00
1999-05-13 11:37:32 +00:00
1999-05-13 11:37:32 +00:00