tree e9ab5434cd8fc9d6fd1f549e8830854f5cfae76c
parent be837402a974d21071390e0d1a0ebc157901ec79
author David Benjamin <davidben@google.com> 1516937342 -0500
committer CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> 1517884898 +0000

Simplify BN_bn2bin_padded.

There is no more need for the "constant-time" reading beyond bn->top. We
can write the bytes out naively because RSA computations no longer call
bn_correct_top/bn_set_minimal_width.

Specifically, the final computation is a BN_mod_mul_montgomery to remove
the blinding, and that keeps the sizes correct.

Bug: 237
Change-Id: I6e90d81c323b644e179d899f411479ea16deab98
Reviewed-on: https://boringssl-review.googlesource.com/25324
Commit-Queue: David Benjamin <davidben@google.com>
CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
Reviewed-by: Adam Langley <agl@google.com>