diff options
| author | Tobias Brunner <tobias@strongswan.org> | 2017-03-29 11:26:24 +0200 |
|---|---|---|
| committer | Andreas Steffen <andreas.steffen@strongswan.org> | 2017-05-29 11:05:04 +0200 |
| commit | 6681d98d18d24b31410fc12c3d61f150107481b3 (patch) | |
| tree | 6e95aa898467c0b28104a8a0417c74ead3f20073 /scripts/timeattack.c | |
| parent | 89f05ed5a963acfe3da074d734527bac3bb23ac5 (diff) | |
| download | strongswan-6681d98d18d24b31410fc12c3d61f150107481b3.tar.bz2 strongswan-6681d98d18d24b31410fc12c3d61f150107481b3.tar.xz | |
gmp: Make sure the modulus is odd and the exponent not zero
Unlike mpz_powm() its secure replacement mpz_powm_sec() has the additional
requirement that the exponent must be > 0 and the modulus has to be odd.
Otherwise, it will crash with a floating-point exception.
Fixes: CVE-2017-9022
Fixes: 3e35a6e7a1b0 ("Use side-channel secured mpz_powm_sec of libgmp 5, if available")
Diffstat (limited to 'scripts/timeattack.c')
0 files changed, 0 insertions, 0 deletions