RSA key generation: ensure BN_mod_inverse and BN_mod_exp_mont both ge…

…t called with BN_FLG_CONSTTIME flag set. Based on an original patch by Billy Brumley CVE-2018-0737 Reviewed-by: Rich Salz <rsalz@openssl.org>
openssl · Apr 16, 2018 · 54f007a · 54f007a
1 parent b0a9793
commit 54f007a
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/crypto/rsa/rsa_gen.c b/crypto/rsa/rsa_gen.c
@@ -157,6 +157,7 @@ static int rsa_builtin_keygen(RSA *rsa, int bits, int primes, BIGNUM *e_value,
             pinfo = sk_RSA_PRIME_INFO_value(prime_infos, i - 2);
             prime = pinfo->r;
         }
+        BN_set_flags(prime, BN_FLG_CONSTTIME);
 
         for (;;) {
  redo: