OpenBSD / src / Jm6u4CJ / Port OpenSSL commit 99540ec79491f59ed8b46b4edf130e17dc907f52 -- mitigation

OpenBSD/src Jm6u4CJ — lib/libcrypto/ec ecp_smpl.c

2018-11-15 05:53:31 UTC by tb on ⎇

HEAD

🏷

OPENBSD_6_8_BASE
OPENBSD_6_7_BASE
OPENBSD_6_6_BASE
OPENBSD_6_5_BASE

   Port OpenSSL commit 99540ec79491f59ed8b46b4edf130e17dc907f52 -- mitigation
   for a timing vullnerability in ECDSA signature generation (CVE-2018-0735).

   Note that the blinding that we introduced back in June for ECDSA and DSA
   should mitigate this and related issues. This simply adds an additional
   layer of protection.

   discussed with jsing

Version	Delta		File
1.29	+4	-4	lib/libcrypto/ec/ecp_smpl.c
	+4	-4	1 files

Unified Split Raw