Repository navigation

Keep secret values out of the variable-time inversion in ECC, ECCSI, SAKKE and BN - #12023

Open

dgarske wants to merge 9 commits into

wolfSSL:masterfrom

dgarske:ecc_ct_inverse

Open

Keep secret values out of the variable-time inversion in ECC, ECCSI, SAKKE and BN#12023
dgarske wants to merge 9 commits into
wolfSSL:masterfrom
dgarske:ecc_ct_inverse

Commits on Nov 5, 2026
- F-7427: Remove WOLFSSL_MP_INVMOD_CONSTANT_TIME macro
  
  Emma Stensland
  authored and
  dgarske
  committed
  723f5f7
- F-7097: Route secret ECC scalars around the fixed-point cache
  
  Emma Stensland
  authored and
  dgarske
  committed
  54b10eb
- F-7098: Blind the ECCSI signing inverse
  
  Emma Stensland
  authored and
  dgarske
  committed
  9c59761
- F-7099: Blind the SAKKE RSK inverse
  
  Emma Stensland
  authored and
  dgarske
  committed
  cfbb724
- F-7426: Implement heap-math CT primitives using branchless masks
  
  Emma Stensland
  authored and
  dgarske
  committed
  a86511c
- Harden ConstantCompare() and use it for the ATECC GCM tag check
  
  Emma Stensland
  authored and
  dgarske
  committed
  458e179
- Use the constant time map for secret scalars, and Fermat inverses in SAKKE
  dgarske
  committed
  c618c6d
- Blind the operand of wolfSSL_BN_mod_inverse
  dgarske
  committed
  d825f90
- Use a constant time comb for secret scalars with the FP_ECC cache
  dgarske
  committed
  51fdd2e