tree 077af64a432c74c8b885de0138eb2552fbe28667
parent 0853bb2beac3c322e3b0ddbb3eef1746f05c34f3
author Gilles Peskine <Gilles.Peskine@arm.com> 1617223857 +0200
committer Gilles Peskine <Gilles.Peskine@arm.com> 1622662586 +0200

DHM blinding: don't accept P-1 as a blinding value

P-1 is as bad as 1 as a blinding value. Don't accept it.

The chance that P-1 would be randomly generated is infinitesimal, so
this is not a practical issue, but it makes the code cleaner. It was
inconsistent to accept P-1 as a blinding value but not as a private key.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>