tree 32e4ae018d953609761236fc280d1d157a571284
parent 0375127606fdc2aada53abb81ec1615a96e2d153
author Brian Smith <brian@briansmith.org> 1469845186 -1000
committer CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> 1470155204 +0000

Calculate inverse in |BN_MONT_CTX_set| in constant time w.r.t. modulus.

Simplify the calculation of the Montgomery constants in
|BN_MONT_CTX_set|, making the inversion constant-time. It should also
be faster by avoiding any use of the |BIGNUM| API in favor of using
only 64-bit arithmetic.

Now it's obvious how it works. /s

Change-Id: I59a1e1c3631f426fbeabd0c752e0de44bcb5fd75
Reviewed-on: https://boringssl-review.googlesource.com/9031
Reviewed-by: Adam Langley <agl@google.com>
Commit-Queue: Adam Langley <agl@google.com>
CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>