Janos Follath d65df1fa67 ECDSA: Fix side channel vulnerability ... The blinding applied to the scalar before modular inversion is inadequate. Bignum is not constant time/constant trace, side channel attacks can retrieve the blinded value, factor it (it is smaller than RSA keys and not guaranteed to have only large prime factors). Then the key can be recovered by brute force. Reducing the blinded value makes factoring useless because the adversary can only recover pk*t+z*N instead of pk*t.		2019-10-25 09:11:21 +01:00
..
.gitignore
aes.c	Add further missing brackets around macro parameters	2019-04-24 10:52:45 +02:00
aesni.c
arc4.c
aria.c	Implement parameter validation for ARIA module	2018-12-19 12:51:00 +00:00
asn1parse.c
asn1write.c	Fix ASN1 bitstring writing	2019-02-11 21:13:33 +00:00
base64.c
bignum.c	Merge remote-tracking branch 'origin/pr/2578' into mbedtls-2.16	2019-10-02 17:59:28 +01:00
blowfish.c	Implement parameter validation for Blowfish module	2018-12-19 12:52:59 +00:00
camellia.c	Minor improvements to Camellia module and documentation	2018-12-19 13:42:05 +00:00
ccm.c	Improve macro hygiene	2019-04-24 10:51:54 +02:00
certs.c	Update certificates to expire in 2029	2019-07-10 18:35:10 +03:00
chacha20.c	Improve macro hygiene	2019-04-24 10:51:54 +02:00
chachapoly.c	Fix wrong conditional in free() functions	2018-12-18 15:30:30 +00:00
cipher_wrap.c
cipher.c	Remove unnecessary parameter validation from the Cipher module	2018-12-19 17:34:58 +01:00
cmac.c
CMakeLists.txt	Bump version to Mbed TLS 2.16.3	2019-09-06 13:27:00 +01:00
ctr_drbg.c
debug.c	Merge remote-tracking branch 'origin/pr/1818' into mbedtls-2.16	2019-03-05 16:28:18 +00:00
des.c	Improve macro hygiene	2019-04-24 10:51:54 +02:00
dhm.c	Allow DHM self test to run without MBEDTLS_PEM_PARSE_C	2019-05-30 10:58:12 +01:00
ecdh.c	Fix mbedtls_ecdh_get_params with new ECDH context	2019-02-22 12:51:51 +01:00
ecdsa.c	ECDSA: Fix side channel vulnerability	2019-10-25 09:11:21 +01:00
ecjpake.c	Fix handling of md failure	2019-07-08 15:44:18 +02:00
ecp_curves.c	Improve macro hygiene	2019-04-24 10:51:54 +02:00
ecp.c	Improve macro hygiene	2019-04-24 10:51:54 +02:00
entropy_poll.c
entropy.c
error.c	Fix #2370, minor typos and spelling mistakes	2019-02-18 14:50:57 +00:00
gcm.c	Improve parameter validation in mbedtls_gcm_free()	2018-12-19 17:32:19 +01:00
havege.c	Prevent building the HAVEGE module on platforms where it doesn't work	2019-06-17 15:12:51 +02:00
hkdf.c
hmac_drbg.c	HMAC DRBG: Split entropy-gathering requests to reduce request sizes	2019-08-30 12:16:06 +01:00
Makefile	Fix #2370, minor typos and spelling mistakes	2019-02-18 14:50:57 +00:00
md2.c
md4.c	Add more missing parentheses around macro parameters	2019-04-24 10:52:53 +02:00
md5.c	Add further missing brackets around macro parameters	2019-04-24 10:52:45 +02:00
md_wrap.c
md.c
memory_buffer_alloc.c
net_sockets.c	net_sockets: Fix typo in net_would_block()	2019-06-20 16:33:02 +01:00
nist_kw.c	Remove faulty cipher_finish calls from nist_kw	2018-12-20 12:15:40 +01:00
oid.c	Improve macro hygiene	2019-04-24 10:51:54 +02:00
padlock.c
pem.c
pk_wrap.c
pk.c	Merge remote-tracking branch 'public/pr/1721' into development-restricted	2018-12-20 12:37:13 +00:00
pkcs5.c
pkcs11.c
pkcs12.c
pkparse.c	pk_parse*keyfile: explicitly validate path=NULL	2018-12-19 17:37:02 +01:00
pkwrite.c	Merge remote-tracking branch 'upstream-restricted/pr/503' into mbedtls-2.16-restricted	2019-08-14 16:39:24 +02:00
platform_util.c	Check for zero length and NULL buffer pointer	2019-09-04 11:19:38 +01:00
platform.c
poly1305.c	Improve macro hygiene	2019-04-24 10:51:54 +02:00
ripemd160.c	Improve macro hygiene	2019-04-24 10:51:54 +02:00
rsa_internal.c
rsa.c	Merge remote-tracking branch 'public/pr/1721' into development-restricted	2018-12-20 12:37:13 +00:00
sha1.c	Add further missing brackets around macro parameters	2019-04-24 10:52:45 +02:00
sha256.c	Add further missing brackets around macro parameters	2019-04-24 10:52:45 +02:00
sha512.c	Add more missing parentheses around macro parameters	2019-04-24 10:52:53 +02:00
ssl_cache.c
ssl_ciphersuites.c	Reduce priority of 3DES ciphersuites	2019-03-01 10:29:13 +01:00
ssl_cli.c
ssl_cookie.c
ssl_srv.c	Fix #2370, minor typos and spelling mistakes	2019-02-18 14:50:57 +00:00
ssl_ticket.c
ssl_tls.c	Merge remote-tracking branch 'origin/pr/2714' into mbedtls-2.16	2019-06-21 16:00:52 +01:00
threading.c
timing.c	timing: Remove redundant include file	2019-06-20 16:33:02 +01:00
version_features.c	Move MBEDTLS_CTR_DRBG_USE_128_BIT_KEY to the correct section	2019-10-04 11:21:25 +02:00
version.c
x509_create.c
x509_crl.c	Always return a high-level error code from X.509 module	2019-06-04 14:01:10 +01:00
x509_crt.c	Fix uninitialized variable in x509_crt	2019-08-30 14:46:03 +03:00
x509_csr.c
x509.c	Merge remote-tracking branch 'origin/pr/2450' into mbedtls-2.16	2019-06-21 15:59:29 +01:00
x509write_crt.c	Change size of preallocated buffer for pk_sign() calls	2019-06-06 13:13:26 +02:00
x509write_csr.c	Change size of preallocated buffer for pk_sign() calls	2019-06-06 13:13:26 +02:00
xtea.c