Ensure that D mod (P-1) and D mod (Q-1) are calculated in constant time.
authorjsing <jsing@openbsd.org>
Wed, 14 Feb 2018 16:27:24 +0000 (16:27 +0000)
committerjsing <jsing@openbsd.org>
Wed, 14 Feb 2018 16:27:24 +0000 (16:27 +0000)
commit972cfb97c0f26482a8a8f451f15f5d63a9b391fc
tree8d0bfdf950e4cbc1fb791931b051d461903df707
parent343313920412ed77707824945bc52e4afc492272
Ensure that D mod (P-1) and D mod (Q-1) are calculated in constant time.

This avoids a potential side channel timing leak.

ok djm@ markus@
usr.bin/ssh/ssh-rsa.c