Bernd Edlinger 8a74bb5c7b Clear the point S before freeing in ec_scalar_mul_ladder ...

The secret point R can be recovered from S using the equation R = S - P.
The X and Z coordinates should be sufficient for that.

Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/8504)

2019-03-18 22:39:55 +01:00

..

asm

Fix some CFI issues in x86_64 assembly

2019-02-17 23:39:51 +01:00

curve448

fix truncation of integers on 32bit AIX

2019-03-11 14:45:18 +01:00

build.info

Build: Remove BEGINRAW / ENDRAW / OVERRIDE

2019-01-31 16:19:49 +01:00

curve25519.c

curve25519.c: improve formula alignment

2018-12-06 19:38:13 +01:00

ec2_oct.c

Following the license change, modify the boilerplates in crypto/ec/

2018-12-06 14:51:47 +01:00

ec2_smpl.c

SCA hardening for mod. field inversion in EC_GROUP

2019-02-17 21:02:36 +02:00

ec_ameth.c

Fix the default digest algorthm of SM2

2019-02-27 10:05:17 +08:00

ec_asn1.c

constify *_dup() and *i2d_*() and related functions as far as possible, introducing DECLARE_ASN1_DUP_FUNCTION

2019-03-06 16:10:09 +00:00

ec_check.c

Following the license change, modify the boilerplates in crypto/ec/

2018-12-06 14:51:47 +01:00

ec_curve.c

Following the license change, modify the boilerplates in crypto/ec/

2018-12-06 14:51:47 +01:00

ec_cvt.c

Following the license change, modify the boilerplates in crypto/ec/

2018-12-06 14:51:47 +01:00

ec_err.c

SCA hardening for mod. field inversion in EC_GROUP

2019-02-17 21:02:36 +02:00

ec_key.c

Following the license change, modify the boilerplates in crypto/ec/

2018-12-06 14:51:47 +01:00

ec_kmeth.c

Following the license change, modify the boilerplates in crypto/ec/

2018-12-06 14:51:47 +01:00

ec_lcl.h

Rearrange the inclusion of curve448/curve448_lcl.h

2019-02-25 19:38:06 +01:00

ec_lib.c

Add EC_GROUP_get0_field

2019-02-15 16:43:18 +02:00

ec_mult.c

Clear the point S before freeing in ec_scalar_mul_ladder

2019-03-18 22:39:55 +01:00

ec_oct.c

Following the license change, modify the boilerplates in crypto/ec/

2018-12-06 14:51:47 +01:00

ec_pmeth.c

constify *_dup() and *i2d_*() and related functions as far as possible, introducing DECLARE_ASN1_DUP_FUNCTION

2019-03-06 16:10:09 +00:00

ec_print.c

Following the license change, modify the boilerplates in crypto/ec/

2018-12-06 14:51:47 +01:00

ecdh_kdf.c

Following the license change, modify the boilerplates in crypto/ec/

2018-12-06 14:51:47 +01:00

ecdh_ossl.c

Clear the secret point in ecdh_simple_compute_key

2019-03-18 22:27:56 +01:00

ecdsa_ossl.c

Following the license change, modify the boilerplates in crypto/ec/

2018-12-06 14:51:47 +01:00

ecdsa_sign.c

Following the license change, modify the boilerplates in crypto/ec/

2018-12-06 14:51:47 +01:00

ecdsa_vrf.c

Following the license change, modify the boilerplates in crypto/ec/

2018-12-06 14:51:47 +01:00

eck_prn.c

Following the license change, modify the boilerplates in crypto/ec/

2018-12-06 14:51:47 +01:00

ecp_mont.c

SCA hardening for mod. field inversion in EC_GROUP

2019-02-17 21:02:36 +02:00

ecp_nist.c

SCA hardening for mod. field inversion in EC_GROUP

2019-02-17 21:02:36 +02:00

ecp_nistp224.c

SCA hardening for mod. field inversion in EC_GROUP

2019-02-17 21:02:36 +02:00

ecp_nistp256.c

SCA hardening for mod. field inversion in EC_GROUP

2019-02-17 21:02:36 +02:00

ecp_nistp521.c

Avoid an underflow in ecp_nistp521.c

2019-03-07 14:42:33 +00:00

ecp_nistputil.c

Following the license change, modify the boilerplates in crypto/ec/

2018-12-06 14:51:47 +01:00

ecp_nistz256_table.c

Following the license change, modify the boilerplates in crypto/ec/

2018-12-06 14:51:47 +01:00

ecp_nistz256.c

SCA hardening for mod. field inversion in EC_GROUP

2019-02-17 21:02:36 +02:00

ecp_oct.c

Following the license change, modify the boilerplates in crypto/ec/

2018-12-06 14:51:47 +01:00

ecp_smpl.c

SCA hardening for mod. field inversion in EC_GROUP

2019-02-17 21:02:36 +02:00

ecx_meth.c

Rearrange the inclusion of curve448/curve448_lcl.h

2019-02-25 19:38:06 +01:00