Skip to content

Commit cba616c

Browse files
committed
SM2: Use constant time modular inversion
Fixes CVE-2025-9231 Issue and a proposed fix reported by Stanislav Fort (Aisle Research). Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (cherry picked from commit dff94db)
1 parent b5282d6 commit cba616c

1 file changed

Lines changed: 3 additions & 3 deletions

File tree

crypto/ec/ecp_sm2p256.c

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -747,7 +747,7 @@ const EC_METHOD *EC_GFp_sm2p256_method(void)
747747
ossl_ec_GFp_simple_point_copy,
748748
ossl_ec_GFp_simple_point_set_to_infinity,
749749
ossl_ec_GFp_simple_point_set_affine_coordinates,
750-
ecp_sm2p256_get_affine,
750+
ossl_ec_GFp_simple_point_get_affine_coordinates,
751751
0, 0, 0,
752752
ossl_ec_GFp_simple_add,
753753
ossl_ec_GFp_simple_dbl,
@@ -763,7 +763,7 @@ const EC_METHOD *EC_GFp_sm2p256_method(void)
763763
ecp_sm2p256_field_mul,
764764
ecp_sm2p256_field_sqr,
765765
0 /* field_div */,
766-
0 /* field_inv */,
766+
ossl_ec_GFp_simple_field_inv,
767767
0 /* field_encode */,
768768
0 /* field_decode */,
769769
0 /* field_set_to_one */,
@@ -779,7 +779,7 @@ const EC_METHOD *EC_GFp_sm2p256_method(void)
779779
ossl_ecdsa_simple_sign_setup,
780780
ossl_ecdsa_simple_sign_sig,
781781
ossl_ecdsa_simple_verify_sig,
782-
ecp_sm2p256_inv_mod_ord,
782+
0, /* use constant‑time fallback for inverse mod order */
783783
0, /* blind_coordinates */
784784
0, /* ladder_pre */
785785
0, /* ladder_step */

0 commit comments

Comments
 (0)