commit 47fede0d6db5a8c484fa61aaab3831b3cb4c364a
author Manuel Pégourié-Gonnard <mpg@elzevir.fr> Wed Apr 29 01:35:48 2015 +0200
committer Manuel Pégourié-Gonnard <mpg@elzevir.fr> Wed Apr 29 01:35:48 2015 +0200
tree 2fe1e70cd4c178a0ff9874a4364d42cf3efcdaaa
parent 9ce1bdc1519d1b0571383064a79bc55f9adc4b8f

Add countermeasure against cache-based lucky 13

library/ssl_tls.c

diff --git a/library/ssl_tls.c b/library/ssl_tls.c
index 72cd6d2..f079adc 100644
--- a/library/ssl_tls.c
+++ b/library/ssl_tls.c
@@ -1825,7 +1825,8 @@
                              ssl->in_msglen );
             md_hmac_finish( &ssl->transform_in->md_ctx_dec,
                              ssl->in_msg + ssl->in_msglen );
-            for( j = 0; j < extra_run; j++ )
+            /* Call md_process at least once due to cache attacks */
+            for( j = 0; j < extra_run + 1; j++ )
                 md_process( &ssl->transform_in->md_ctx_dec, ssl->in_msg );
 
             md_hmac_reset( &ssl->transform_in->md_ctx_dec );