tree e3c6f3c85de1e546002c3d6098bde4cc840772c1
parent 4899247bf2cf1cae088e0c11a36f09166561875b
author Gilles Peskine <Gilles.Peskine@arm.com> 1542728867 +0100
committer Gilles Peskine <Gilles.Peskine@arm.com> 1542730167 +0100

mbedtls_mpi_write_binary: don't leak the exact size of the number

In mbedtls_mpi_write_binary, avoid leaking the size of the number
through timing or branches, if possible. More precisely, if the number
fits in the output buffer based on its allocated size, the new code's
trace doesn't depend on the value of the number.