granicus.if.org Git - openssl/commit

]> granicus.if.org Git - openssl/commit

author	Dr. Stephen Henson <steve@openssl.org>
	Tue, 29 Jan 2013 14:44:36 +0000 (14:44 +0000)
committer	Dr. Stephen Henson <steve@openssl.org>
	Thu, 31 Jan 2013 12:34:10 +0000 (12:34 +0000)
commit	b908e88ec15aa0a74805e3f2236fc4f83f2789c2
tree	424b1a8703f65502460f311a42d3da7521a4085b	tree \| snapshot
parent	014265eb02e26f35c8db58e2ccbf100b0b2f0072	commit \| diff

Timing fix mitigation for FIPS mode.
We have to use EVP in FIPS mode so we can only partially mitigate
timing differences.

Make an extra call to EVP_DigestSignUpdate to hash additonal blocks
to cover any timing differences caused by removal of padding.

ssl/s3_cbc.c		diff \| blob \| history
ssl/ssl_locl.h		diff \| blob \| history
ssl/t1_enc.c		diff \| blob \| history

Unnamed repository; edit this file 'description' to name the repository.

RSS Atom