tree 91b2dd78f031816f964956654e6ba96bf53b40cb
parent 39ead3ef2f7513352c415136737c2c8a00ccb4ac
author Manuel Pégourié-Gonnard <mpg@elzevir.fr> 1427465167 +0100
committer Manuel Pégourié-Gonnard <mpg@elzevir.fr> 1427465525 +0100

Fix thread safety issue in RSA operations

The race was due to mpi_exp_mod storing a Montgomery coefficient in the
context (RM, RP, RQ).

The fix was verified with -fsanitize-thread using ssl_pthread_server and two
concurrent clients.

A more fine-grained fix should be possible, locking just enough time to check
if those values are OK and set them if not, rather than locking for the whole
mpi_exp_mod() operation, but it will be for later.