secure boot: Fix anti-fault value if hash is shorter than curve

(Not actually a problem with SBV1 anti-fault as hash size == curve size in this case.)
This commit is contained in:
Angus Gratton 2020-03-11 17:17:20 +11:00 committed by Supreet Deshpande
parent 5f2d918437
commit 5cd45a6d80

View file

@ -133,7 +133,7 @@ int uECC_verify_antifault(const uint8_t *public_key,
}
/* Curve may be longer than hash, in which case keep reading the rest of the bytes */
for (int w = hash_words; w < curve->num_words; w++) {
vhash_words[w % hash_words] |= rx[w] | r[w];
vhash_words[w % hash_words] |= rx[w] ^ r[w];
}
/* Accept only if v == r. */