tree f72d5aa7cde9f74fcf3f7bf32af50a73aac91c57
parent 96449ceebeb3024123ff41bc88a6f275bb602eac
author Gilles Peskine <Gilles.Peskine@arm.com> 1616585159 +0100
committer Gilles Peskine <Gilles.Peskine@arm.com> 1622736604 +0200

mbedtls_ecp_gen_privkey_mx: make bit manipulations unconditional

Don't calculate the bit-size of the initially generated random number.
This is not necessary to reach the desired distribution of private
keys, and creates a (tiny) side channel opportunity.

This changes the way the result is derived from the random number, but
does not affect the resulting distribution.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>