tree 175581413cdd8ce40075740221881f2dde2c84fb
parent bfa0f7d54077dd278c7952e2d002b5206262c686
author Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com> 1585136489 +0100
committer Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com> 1585731738 +0200

Fix leakage of projective coordinates in ECC

See the comments in the code for how an attack would go, and the ChangeLog
entry for an impact assessment. (For ECDSA, leaking a few bits of the scalar
over several signatures translates to full private key recovery using a
lattice attack.)

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>