David Benjamin a20bb7ff8b bn/asm/rsaz-avx2.pl: fix digit correction bug in rsaz_1024_mul_avx2. ...

Credit to OSS-Fuzz for finding this.

CVE-2017-3738

(Imported from upstream's 5630661aecbea5fe3c4740f5fea744a1f07a6253 and
77d75993651b63e872244a3256e37967bb3c3e9e.)

Confirmed with Intel SDE that the fix makes the test vector pass and
that, without the fix, the test vector does not. (Well, we knew the
latter already, since it was our test vector.)

Change-Id: I167aa3407ddab3b434bacbd18e099c55aa40ac4c
Reviewed-on: https://boringssl-review.googlesource.com/23884
Reviewed-by: Adam Langley <agl@google.com>
(cherry picked from commit 296a61d600)
Reviewed-on: https://boringssl-review.googlesource.com/23964
Reviewed-by: David Benjamin <davidben@google.com>
Commit-Queue: David Benjamin <davidben@google.com>
CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>

2017-12-11 19:33:36 +00:00

..

asm

bn/asm/rsaz-avx2.pl: fix digit correction bug in rsaz_1024_mul_avx2.

2017-12-11 19:33:36 +00:00

add.c

Clear no-op BN_MASK2 masks.

2017-10-27 02:38:45 +00:00

bn_test_to_fuzzer.go

Generate bn_div and bn_mod_exp corpus from bn_tests.txt.

2017-10-27 18:57:48 +00:00

bn_test.cc

Add bn_mod_exp_mont_small and bn_mod_inverse_prime_mont_small.

2017-11-20 16:23:48 +00:00

bn_tests.txt

bn/asm/rsaz-avx2.pl: fix digit correction bug in rsaz_1024_mul_avx2.

2017-12-11 19:33:36 +00:00

bn.c

Remove redundant calls to |OPENSSL_cleanse| and |OPENSSL_realloc_clean|.

2017-09-18 19:16:51 +00:00

bytes.c

Run the comment converter on libcrypto.

2017-08-18 21:49:04 +00:00

check_bn_tests.go

Move bn/ into crypto/fipsmodule/

2017-05-01 22:51:25 +00:00

cmp.c

Make BN_generate_dsa_nonce internally constant-time.

2017-11-20 16:18:30 +00:00

ctx.c

Run the comment converter on libcrypto.

2017-08-18 21:49:04 +00:00

div.c

Align |BN_div| with its documentation.

2017-11-06 22:55:30 +00:00

exponentiation.c

Add bn_mod_exp_mont_small and bn_mod_inverse_prime_mont_small.

2017-11-20 16:23:48 +00:00

gcd.c

Run the comment converter on libcrypto.

2017-08-18 21:49:04 +00:00

generic.c

Const-correct some of the low-level BIGNUM functions.

2017-11-20 16:20:40 +00:00

internal.h

Make ECDSA signing 10% faster and plug some timing leaks.

2017-11-22 22:51:40 +00:00

jacobi.c

Run the comment converter on libcrypto.

2017-08-18 21:49:04 +00:00

montgomery_inv.c

Run the comment converter on libcrypto.

2017-08-18 21:49:04 +00:00

montgomery.c

Add "small" variants of Montgomery logic.

2017-11-20 16:23:01 +00:00

mul.c

Include a couple of missing header files.

2017-11-20 20:36:38 +00:00

prime.c

Run the comment converter on libcrypto.

2017-08-18 21:49:04 +00:00

random.c

Make ECDSA signing 10% faster and plug some timing leaks.

2017-11-22 22:51:40 +00:00

rsaz_exp.c

Move bn/ into crypto/fipsmodule/

2017-05-01 22:51:25 +00:00

rsaz_exp.h

Move bn/ into crypto/fipsmodule/

2017-05-01 22:51:25 +00:00

shift.c

Add bn_mod_exp_mont_small and bn_mod_inverse_prime_mont_small.

2017-11-20 16:23:48 +00:00

sqrt.c

Run the comment converter on libcrypto.

2017-08-18 21:49:04 +00:00