David Benjamin a20bb7ff8b bn/asm/rsaz-avx2.pl: fix digit correction bug in rsaz_1024_mul_avx2. ...

Credit to OSS-Fuzz for finding this.

CVE-2017-3738

(Imported from upstream's 5630661aecbea5fe3c4740f5fea744a1f07a6253 and
77d75993651b63e872244a3256e37967bb3c3e9e.)

Confirmed with Intel SDE that the fix makes the test vector pass and
that, without the fix, the test vector does not. (Well, we knew the
latter already, since it was our test vector.)

Change-Id: I167aa3407ddab3b434bacbd18e099c55aa40ac4c
Reviewed-on: https://boringssl-review.googlesource.com/23884
Reviewed-by: Adam Langley <agl@google.com>
(cherry picked from commit 296a61d600)
Reviewed-on: https://boringssl-review.googlesource.com/23964
Reviewed-by: David Benjamin <davidben@google.com>
Commit-Queue: David Benjamin <davidben@google.com>
CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>

2017-12-11 19:33:36 +00:00

..

aes

es/asm/{aes-armv4|bsaes-armv7}.pl: make it work with binutils-2.29.

2017-11-08 16:53:04 +00:00

bn

bn/asm/rsaz-avx2.pl: fix digit correction bug in rsaz_1024_mul_avx2.

2017-12-11 19:33:36 +00:00

cipher

Add more compatibility symbols for Node.

2017-11-03 01:31:50 +00:00

des

Explicit fallthrough on switch

2017-09-20 19:58:25 +00:00

digest

Switch OPENSSL_VERSION_NUMBER to 1.1.0.

2017-09-29 04:51:27 +00:00

ec

Don't use BN_nnmod to convert from field element to scalar.

2017-11-22 22:51:53 +00:00

ecdsa

Use some of the word-based functions for ECDSA verification.

2017-11-22 22:52:04 +00:00

hmac

Switch OPENSSL_VERSION_NUMBER to 1.1.0.

2017-09-29 04:51:27 +00:00

md4

Run the comment converter on libcrypto.

2017-08-18 21:49:04 +00:00

md5

Run the comment converter on libcrypto.

2017-08-18 21:49:04 +00:00

modes

Appease UBSan on pointer alignment.

2017-11-10 21:07:03 +00:00

policydocs

Update FIPS documentation with pointer to the cert and security policy.

2017-07-20 03:32:08 +00:00

rand

Remove CTR_DRBG_STATE alignment marker.

2017-09-18 19:17:52 +00:00

rsa

Add some missing OpenSSL 1.1.0 accessors.

2017-11-22 18:43:38 +00:00

sha

Revert assembly changes in "Hide CPU capability symbols in C."

2017-10-30 20:39:57 +00:00

bcm.c

Run the comment converter on libcrypto.

2017-08-18 21:49:04 +00:00

CMakeLists.txt

Convert example_mul to GTest.

2017-07-10 19:28:29 +00:00

delocate.h

Run the comment converter on libcrypto.

2017-08-18 21:49:04 +00:00

FIPS.md

Update FIPS documentation with pointer to the cert and security policy.

2017-07-20 03:32:08 +00:00

intcheck1.png

First part of the FIPS module.

2017-04-07 00:05:34 +00:00

intcheck2.png

Inject FIPS hash without running module.

2017-04-12 23:09:38 +00:00

intcheck3.png

First part of the FIPS module.

2017-04-07 00:05:34 +00:00

is_fips.c

Run the comment converter on libcrypto.

2017-08-18 21:49:04 +00:00