tree 5d8df847173e26990665bb2f962d4d0bdc8a0abf
parent 3e87165d3cdaf3c90c8f7551228cd94729ed2c7d
author David Benjamin <davidben@google.com> 1525292168 -0400
committer Adam Langley <agl@google.com> 1525389682 +0000

bn/asm/*-mont.pl: fix memory access pattern in final subtraction.

Montgomery multiplication post-conditions in some of code paths were
formally non-constant time. Cache access pattern was result-neutral,
but a little bit asymmetric, which might have produced a signal [if
processor reordered load and stores at run-time].

(Imported from upstream's 774ff8fed67e19d4f5f0df2f59050f2737abab2a.)

Change-Id: I77443fb79242b77e704c34d69f1de9e3162e9538
Reviewed-on: https://boringssl-review.googlesource.com/27987
Reviewed-by: Adam Langley <agl@google.com>