tree 6bf71ad4bf3513211bd24f9b9f2b13b65ca7530f
parent 58add794d995e0462afbfea92d28fc2f4e38a10e
author David Benjamin <davidben@google.com> 1586209547 -0400
committer CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> 1586303170 +0000

Remove BIGNUM from uncompressed coordinate parsing.

Compressed coordinates still use BIGNUM. I've moved the curve check to
an EC_FELEM-based ec_point_set_affine_coordinates and implemented a
tighter one than ec_GFp_simple_is_on_curve, which currently needs to
branch on Jacobian vs. affine and potentially leaks information. (A
later CL will make it conservatively always perform a Jacobian check.)

The Trust Tokens implementation will eventually need to deserialize
points, so this avoids needing to allocate EC_POINTs everywhere.
Likewise if we ever get around to adding a better ECDH, this will let us
avoid pulling in BIGNUMs.

Bug: chromium:1014199, 242
Change-Id: I93162ba3680d38cb3c0eacff1eb8f42a445246ea
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/40587
Commit-Queue: David Benjamin <davidben@google.com>
Reviewed-by: Adam Langley <agl@google.com>