diff options
author | Sohaib ul Hassan <sohaibulhassan@tuni.fi> | 2020-07-09 18:51:51 +0000 |
---|---|---|
committer | Moonchild <moonchild@palemoon.org> | 2020-07-09 18:51:51 +0000 |
commit | 3e56a2c97d8da44054d165d1365c7bb78824c529 (patch) | |
tree | ff35179c49b29a33ec80fff6c512cecf2fcbaa64 /widget | |
parent | 247ed6576c10b810589d25b23529b212b2c1efec (diff) | |
download | UXP-3e56a2c97d8da44054d165d1365c7bb78824c529.tar UXP-3e56a2c97d8da44054d165d1365c7bb78824c529.tar.gz UXP-3e56a2c97d8da44054d165d1365c7bb78824c529.tar.lz UXP-3e56a2c97d8da44054d165d1365c7bb78824c529.tar.xz UXP-3e56a2c97d8da44054d165d1365c7bb78824c529.zip |
[NSS] Implement constant-time GCD and modular inversion
The implementation is based on the work by Bernstein and Yang
(https://eprint.iacr.org/2019/266)
"Fast constant-time gcd computation and modular inversion".
It fixes the old mp_gcd and s_mp_invmod_odd_m functions. The patch also fixes
mpl_significant_bits s_mp_div_2d and s_mp_mul_2d by having less control flow to
reduce side-channel leaks.
Co-authored by : Billy Bob Brumley
Diffstat (limited to 'widget')
0 files changed, 0 insertions, 0 deletions