diff options
| author | agl@chromium.org <agl@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2012-07-27 21:25:19 +0000 |
|---|---|---|
| committer | agl@chromium.org <agl@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2012-07-27 21:25:19 +0000 |
| commit | 5edb84671e92de756662871e912488107d15dedd (patch) | |
| tree | 5da0baeb94a3385173fbcc65d13c07f0991beee4 /cloud_print | |
| parent | 2500961f4fdfc570c0b51f027547a734d03c6bd3 (diff) | |
| download | chromium_src-5edb84671e92de756662871e912488107d15dedd.zip chromium_src-5edb84671e92de756662871e912488107d15dedd.tar.gz chromium_src-5edb84671e92de756662871e912488107d15dedd.tar.bz2 | |
crypto: special case ∞+a, a+∞ and a+a in p224.
In unrelated work, I found that the group addition formula used in p224.cc
doesn't work when one of the arguments is the point at infinity. This change
catches that case and simplifies the ScalarMult loop as a consequence.
In the course of doing this, I found a couple of bugs in Contract that would
have produced the wrong answer is very rare cases.
I also added a catch for a+a. This can't happen in the ScalarMult loop, but it
could happen from SPAKE2 at a rate of 1 in ~2**220 evaluations.
BUG=none
TEST=crypto_unittests
Review URL: https://chromiumcodereview.appspot.com/10822019
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@148815 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'cloud_print')
0 files changed, 0 insertions, 0 deletions