File 0001-Add-a-constant-time-flag-to-one-of-the-bignums-to-av.patch of Package openssl-1_0_0.16376
From 880d1c76ed9916cddb97fe05fb4c144f0f6f1012 Mon Sep 17 00:00:00 2001
From: Pauli <paul.dale@oracle.com>
Date: Thu, 1 Nov 2018 08:44:11 +1000
Subject: [PATCH] Add a constant time flag to one of the bignums to avoid a
timing leak.
Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/7549)
(cherry picked from commit 00496b6423605391864fbbd1693f23631a1c5239)
---
crypto/dsa/dsa_ossl.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
Index: openssl-1.0.2p/crypto/dsa/dsa_ossl.c
===================================================================
--- openssl-1.0.2p.orig/crypto/dsa/dsa_ossl.c 2018-11-23 16:04:33.350575700 +0100
+++ openssl-1.0.2p/crypto/dsa/dsa_ossl.c 2018-11-23 16:04:33.366575792 +0100
@@ -311,9 +311,9 @@ static int dsa_sign_setup(DSA *dsa, BN_C
if ((dsa->flags & DSA_FLAG_NO_EXP_CONSTTIME) == 0) {
BN_set_flags(&k, BN_FLG_CONSTTIME);
+ BN_set_flags(&l, BN_FLG_CONSTTIME);
}
-
if (dsa->flags & DSA_FLAG_CACHE_MONT_P) {
if (!BN_MONT_CTX_set_locked(&dsa->method_mont_p,
CRYPTO_LOCK_DSA, dsa->p, ctx))