]> Cypherpunks repositories - gostls13.git/commit
crypto/internal/fips140/nistec: make p256NegCond constant time on ppc64le
authorRoland Shoemaker <roland@golang.org>
Wed, 22 Jan 2025 00:03:14 +0000 (16:03 -0800)
committerRoland Shoemaker <roland@golang.org>
Wed, 22 Jan 2025 16:18:42 +0000 (08:18 -0800)
commit6fc23a3cff5e38ff72923fee50f51254dcdc6e93
treecb974afb7939892d320351279db9ef2ff76045eb
parent70b603f4d295573197b43ad090d7cad21895144e
crypto/internal/fips140/nistec: make p256NegCond constant time on ppc64le

Remove the branching instruction from p256NegCond which made it variable
time. The technique used matches that used in p256MovCond.

Fixes #71383
Fixes CVE-2025-22866

Change-Id: Ibc2a46814d856cbbdaf6cc0c5a415ed5d42ca793
Reviewed-on: https://go-review.googlesource.com/c/go/+/643735
Reviewed-by: David Chase <drchase@google.com>
Reviewed-by: Filippo Valsorda <filippo@golang.org>
Reviewed-by: Paul Murphy <murp@ibm.com>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
src/crypto/internal/fips140/nistec/p256_asm_ppc64le.s