Fixed carry propagation bug in P-256 'm62' implementation (found by Auke Zeilstra...

[BearSSL] / src / rsa / rsa_default_priv.c

diff --git a/src/rsa/rsa_default_priv.c b/src/rsa/rsa_default_priv.c
index 04e3381..bb0b2c0 100644 (file)
--- a/src/rsa/rsa_default_priv.c
+++ b/src/rsa/rsa_default_priv.c
@@ -28,7 +28,9 @@
 br_rsa_private
 br_rsa_private_get_default(void)
 {
-#if BR_LOMUL
+#if BR_INT128 || BR_UMUL128
+       return &br_rsa_i62_private;
+#elif BR_LOMUL
        return &br_rsa_i15_private;
 #else
        return &br_rsa_i31_private;