wolfssl
wolfssl copied to clipboard
20240725-wc_DhAgree_ct
add constant time DH key agreement APIs and related logic:
-
wc_DhAgree_ct() -
wolfSSL_DH_compute_key_padded() -
sp_read_unsigned_bin_ct() -
wolfcrypt/src/integer.c:mp_read_unsigned_bin_ct() -
fp_read_unsigned_bin_ct()
tested with wolfssl-multi-test.sh ... super-quick-check all-enable-fastmath clang-tidy-intmath intmath-sanitizer
retest this please
converted this to a draft because the use case we're trying to accommodate here is for a FIPS wolfCrypt, so the inside-the-boundary changes are problematic at best.