mirror of
https://github.com/yuzu-emu/mbedtls.git
synced 2024-11-23 03:55:44 +01:00
14ab9c2879
This is a counter-measure to make horizontal attacks harder. Horizontal attacks work with a single trace by noticing when intermediate computations within that trace happen on the same operands. We'll try to make that harder for an attacker to achieve that by introducing random delays based on extra computation and extra random accesses to input in the multi-precision multiplication (which is the dominant operation and the target of horizontal attacks known so far). This should make it hard for the attacker to compare two multiplications. This first commit introduces the new function for multiplication with random delay - future commits will ensure it is used all the way up to the top-level scalar multiplication routine. |
||
|---|---|---|
| .. | ||
| CMakeLists.txt | ||
| ecc_dh.c | ||
| ecc_dsa.c | ||
| ecc.c | ||
| LICENSE | ||
| README | ||
================================================================================
TinyCrypt Cryptographic Library
(integrated as part of Mbed TLS)
================================================================================
Copyright (c) 2017, Intel Corporation. All rights reserved.
Redistribution and use in source and binary forms, with or without modification,
are permitted provided that the following conditions are met:
- Redistributions of source code must retain the above copyright notice, this
list of conditions and the following disclaimer.
- Redistributions in binary form must reproduce the above copyright notice,
this list of conditions and the following disclaimer in the documentation
and/or other materials provided with the distribution.
- Neither the name of the Intel Corporation nor the names of its contributors
may be used to endorse or promote products derived from this software
without specific prior written permission.
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR
ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON
ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
================================================================================
Copyright (c) 2019 ARM Limited
================================================================================
Overview:
The TinyCrypt Library provides an implementation for constrained devices of a
minimal set of standard cryptography primitives.
This is a modified form of the library based on version 0.2.8 included as part
of Mbed TLS as a compilation option. It is not included in its full form and
those wishing to use TinyCrypt should use the original unmodified project.
The original project can be found here: https://github.com/intel/tinycrypt
Contributions should be made upstream to that project, and full documentation
can be found in the originating repository.
================================================================================
Organization:
tinycrypt: C source code of the cryptographic primitives.
include/tinycrypt: C header files of the cryptographic primitives.
No documentation is provided, and instead is available with the original
project.
Tests are provided as part of Mbed TLS and the Mbed TLS test suites.
================================================================================
Building:
To include TinyCrypt as part of Mbed TLS, enable the configuration option
MBEDTLS_USE_TINYCRYPT in the configration file 'include/mbedtls/config.h', and
build as Mbed TLS as normal.
================================================================================