[PATCH] mpi:ec: Least leak with k^(-1) for ECDSA.

NIIBE Yutaka gniibe at fsij.org
Wed May 14 06:35:43 CEST 2025


* src/mpi.h (_gcry_mpi_assign_limb_space): Add.
(_gcry_mpih_mod_lli, _gcry_mpih_mul_lli): Add.
* cipher/ecc-ecdsa.c (_gcry_ecc_ecdsa_sign): Take care
about least leak with k^(-1).

--

GnuPG-bug-id: 7519
Signed-off-by: NIIBE Yutaka <gniibe at fsij.org>
---
 cipher/ecc-ecdsa.c | 20 +++++++++++++++++++-
 src/mpi.h          |  7 +++++++
 2 files changed, 26 insertions(+), 1 deletion(-)

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-mpi-ec-Least-leak-with-k-1-for-ECDSA.patch
Type: text/x-patch
Size: 2579 bytes
Desc: not available
URL: <https://lists.gnupg.org/pipermail/gcrypt-devel/attachments/20250514/0d107689/attachment.bin>


More information about the Gcrypt-devel mailing list