tree 73733eb903edab26b0137adf99a8bd6d2957065b
parent aa3ed6f9872e3def71a557a940ab6f81364f274b
author Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com> 1623749366 +0200
committer Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com> 1623915518 +0200

Fix mbedtls_ecp_muladd()

It was indirectly calling ecp_mul() without an RNG. That's actually the
rare case where this should be allowed, as ecp_muladd() is typically
used on non-secret data (to verify signatures or ZKPs) and documented as
not being constant-time.

Refactor a bit in order to keep the ability to call ecp_mul() without a
RNG, but not exposed publicly (except though muladd).

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>