rsa/rsa_ssl.c: make RSA_padding_check_SSLv23 constant-time.
authorAndy Polyakov <appro@openssl.org>
Fri, 14 Sep 2018 15:24:13 +0000 (17:24 +0200)
committerRichard Levitte <levitte@openssl.org>
Sat, 8 Dec 2018 11:56:37 +0000 (12:56 +0100)
commit6d405b64b77f29241b680f7edadd14d5dc0a8522
tree7281d993e17a4ce60b855bbae364507df8509a7f
parent437b7f059304f59a0fa96d329ca62cd8d748cbc8
rsa/rsa_ssl.c: make RSA_padding_check_SSLv23 constant-time.

Copy of RSA_padding_check_PKCS1_type_2 with a twist that rejects padding
if nul delimiter is preceded by 8 consecutive 0x03 bytes.

Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(cherry picked from commit 603221407ddc6404f8c417c6beadebf84449074c)

Resolved conflicts:
crypto/rsa/rsa_ssl.c

(Merged from https://github.com/openssl/openssl/pull/7735)
crypto/rsa/rsa_ssl.c