commit 61f412eb587dcb842c9388b93505bc078a58aac4
author Teppo Järvelin <teppo.jarvelin@arm.com> Thu Oct 03 12:25:22 2019 +0300
committer Teppo Järvelin <teppo.jarvelin@arm.com> Thu Oct 03 13:14:33 2019 +0300
tree aeec04ea080257880d100f8e848b7d91bbe739e1
parent 51f65e4b86f59c7976168eeb61dbe16bbda88356

Changed every memcmp to SCA equivalent mbedtls_platform_memcmp

This makes physical attacks more difficult.
Selftest memcmp functions were not changed.

library/cmac.c

diff --git a/library/cmac.c b/library/cmac.c
index 5d101e1..cc0a4a7 100644
--- a/library/cmac.c
+++ b/library/cmac.c
@@ -902,7 +902,7 @@
         mbedtls_printf( "  AES CMAC 128 PRF #%u: ", i );
         ret = mbedtls_aes_cmac_prf_128( PRFK, PRFKlen[i], PRFM, 20, output );
         if( ret != 0 ||
-            memcmp( output, PRFT[i], MBEDTLS_AES_BLOCK_SIZE ) != 0 )
+                memcmp( output, PRFT[i], MBEDTLS_AES_BLOCK_SIZE ) != 0 )
         {
 
             if( verbose != 0 )