Dr. Stephen Henson 4b7a4ba29c Fix for CVE-2014-0076 ...

Fix for the attack described in the paper "Recovering OpenSSL
ECDSA Nonces Using the FLUSH+RELOAD Cache Side-channel Attack"
by Yuval Yarom and Naomi Benger. Details can be obtained from:
http://eprint.iacr.org/2014/140

Thanks to Yuval Yarom and Naomi Benger for discovering this
flaw and to Yuval Yarom for supplying a fix.
(cherry picked from commit 2198be3483259de374f91e57d247d0fc667aef29)

Conflicts:

	CHANGES

2014-03-12 14:19:54 +00:00

..

asm

bn/asm/x86_64-mont5.pl: comply with Win64 ABI.

2013-12-04 00:03:46 +01:00

.cvsignore

…

bn_add.c

Revert the size_t modifications from HEAD that had led to more

2008-11-12 03:58:08 +00:00

bn_asm.c

Bring C bn_mul_mont template closer to assembler.

2008-12-16 07:28:38 +00:00

bn_blind.c

BN_BLINDING multi-threading fix.

2011-10-19 14:58:59 +00:00

bn_const.c

…

bn_ctx.c

Two digits is not wide enough.

2009-06-14 10:23:29 +00:00

bn_depr.c

…

bn_div.c

Reduce version skew.

2012-06-08 09:18:47 +00:00

bn_err.c

…

bn_exp2.c

PR: 2295

2010-10-11 23:25:23 +00:00

bn_exp.c

BN update from HEAD.

2011-11-14 21:05:42 +00:00

bn_gcd.c

Reduce version skew.

2012-06-08 09:18:47 +00:00

bn_gf2m.c

bn/bn_gf2m.c: make new BN_GF2m_mod_inv work with BN_DEBUG_RAND [from HEAD].

2012-03-30 17:40:52 +00:00

bn_kron.c

…

bn_lcl.h

bn_lcl.h: gcc removed support for "h" constraint, which broke inline

2012-09-01 13:23:05 +00:00

bn_lib.c

Fix for CVE-2014-0076

2014-03-12 14:19:54 +00:00

bn_mod.c

…

bn_mont.c

BN update from HEAD.

2011-11-14 21:05:42 +00:00

bn_mpi.c

Revert the size_t modifications from HEAD that had led to more

2008-11-12 03:58:08 +00:00

bn_mul.c

Fix warnings (From HEAD, original patch by Ben).

2010-06-15 17:25:15 +00:00

bn_nist.c

bn_nist.c: cumulative update from master.

2013-02-16 11:40:35 +01:00

bn_prime.c

…

bn_prime.h

…

bn_prime.pl

…

bn_print.c

Move BN_options function to bn_print.c to remove dependency for BIO printf

2011-01-25 17:10:42 +00:00

bn_rand.c

Revert the size_t modifications from HEAD that had led to more

2008-11-12 03:58:08 +00:00

bn_recp.c

Revert the size_t modifications from HEAD that had led to more

2008-11-12 03:58:08 +00:00

bn_shift.c

BN update from HEAD.

2011-11-14 21:05:42 +00:00

bn_sqr.c

…

bn_sqrt.c

…

bn_word.c

bn_word.c: fix overflow bug in BN_add_word.

2013-02-02 22:39:00 +01:00

bn_x931p.c

add X9.31 prime generation routines from 0.9.8 branch

2011-01-09 13:22:47 +00:00

bn.h

Fix for CVE-2014-0076

2014-03-12 14:19:54 +00:00

bn.mul

…

bnspeed.c

…

bntest.c

Backport from HEAD:

2011-06-06 11:49:36 +00:00

divtest.c

…

exp.c

…

expspeed.c

…

exptest.c

Remove the dual-callback scheme for numeric and pointer thread IDs,

2008-08-06 15:54:15 +00:00

Makefile

make update

2014-01-06 13:33:27 +00:00

todo

…

vms-helper.c

…