[git] GCRYPT - branch, gniibe-T3358, updated. libgcrypt-1.8.0-15-gaeca1f0

[by NIIBE Yutaka]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "The GNU crypto library".

The branch, gniibe-T3358 has been updated
       via  aeca1f0afc9091dab9fe1f018ea600064531ccf0 (commit)
      from  02444ab2addeaf9b41aa1bed82cfc7b1ca67404f (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit aeca1f0afc9091dab9fe1f018ea600064531ccf0
Author: NIIBE Yutaka <gniibe at fsij.org>
Date:   Wed Aug 23 10:22:21 2017 +0900

    ecc: Fix ec_mulm_25519.
    
    * mpi/ec.c (ec_mulm_25519): Fix the cases of 0 to 18.
    
    Signed-off-by: NIIBE Yutaka <gniibe at fsij.org>

diff --git a/mpi/ec.c b/mpi/ec.c
index 6f7df27..21cf78b 100644
--- a/mpi/ec.c
+++ b/mpi/ec.c
@@ -479,6 +479,11 @@ ec_mulm_25519 (gcry_mpi_t w, gcry_mpi_t u, gcry_mpi_t v, mpi_ec_t ctx)
   m[0] = (cy * 2 + msb) * 19;
   _gcry_mpih_add_n (wp, wp, m, wsize);
   wp[LIMB_SIZE_25519-1] &= ~(1UL << (255 % BITS_PER_MPI_LIMB));
+
+  m[0] = 0;
+  cy = _gcry_mpih_sub_n (wp, wp, ctx->p->d, wsize);
+  mpih_set_cond (m, ctx->p->d, wsize, (cy != 0UL));
+  _gcry_mpih_add_n (wp, wp, m, wsize);
 }
 
 static void

-----------------------------------------------------------------------

Summary of changes:
 mpi/ec.c | 5 +++++
 1 file changed, 5 insertions(+)


hooks/post-receive
-- 
The GNU crypto library
http://git.gnupg.org