diff options
| author | Daiki Ueno <ueno@gnu.org> | 2021-04-02 16:01:21 +0200 |
|---|---|---|
| committer | Daiki Ueno <ueno@gnu.org> | 2021-05-11 08:08:19 +0200 |
| commit | 0f18f07efe103718ca79f5a206a08c3a3cc6c410 (patch) | |
| tree | 94fe784d24d76dcd9c34ca50d94a1224e9ad527f /lib/nettle/ecc/override/ecc-internal.h.diff | |
| parent | 5980d0d9a23b552703507625ba6437bca7f45005 (diff) | |
| download | gnutls-0f18f07efe103718ca79f5a206a08c3a3cc6c410.tar.gz | |
nettle: port upstream hardening of EC point multiplication
Some internal functions used in point multiplications are known to
misbehave if the scaler is out-of-range. This performs canonical
reduction on scalers, before point multiplication.
This ports the fixes from Nettle upstream to the bundled EC code.
See the Nettle 3.7.2 release announcement for details:
https://lists.lysator.liu.se/pipermail/nettle-bugs/2021/009458.html
Signed-off-by: Daiki Ueno <ueno@gnu.org>
Diffstat (limited to 'lib/nettle/ecc/override/ecc-internal.h.diff')
| -rw-r--r-- | lib/nettle/ecc/override/ecc-internal.h.diff | 26 |
1 files changed, 26 insertions, 0 deletions
diff --git a/lib/nettle/ecc/override/ecc-internal.h.diff b/lib/nettle/ecc/override/ecc-internal.h.diff new file mode 100644 index 0000000000..170191836c --- /dev/null +++ b/lib/nettle/ecc/override/ecc-internal.h.diff @@ -0,0 +1,26 @@ +diff --git a/ecc-internal.h b/ecc-internal.h +index 9e24e0ce..2cc9b137 100644 +--- a/ecc-internal.h ++++ b/ecc-internal.h +@@ -49,6 +49,7 @@ + #define ecc_mod_submul_1 _nettle_ecc_mod_submul_1 + #define ecc_mod_mul _nettle_ecc_mod_mul + #define ecc_mod_sqr _nettle_ecc_mod_sqr ++#define ecc_mod_mul_canonical _nettle_ecc_mod_mul_canonical + #define ecc_mod_random _nettle_ecc_mod_random + #define ecc_mod _nettle_ecc_mod + #define ecc_mod_inv _nettle_ecc_mod_inv +@@ -256,6 +257,13 @@ void + ecc_mod_sqr (const struct ecc_modulo *m, mp_limb_t *rp, + const mp_limb_t *ap); + ++/* mul function produces a canonical result, 0 <= R < M, needs 2*m->size limbs ++ * at rp. ++ */ ++void ++ecc_mod_mul_canonical (const struct ecc_modulo *m, mp_limb_t *rp, ++ const mp_limb_t *ap, const mp_limb_t *bp); ++ + /* mod q operations. */ + void + ecc_mod_random (const struct ecc_modulo *m, mp_limb_t *xp, |