Added stricter rule on input for RSA private key operation (mathematically correct...

[BearSSL] / src / symcipher / aes_ct64.c

diff --git a/src/symcipher/aes_ct64.c b/src/symcipher/aes_ct64.c
index 981e63d..1523811 100644 (file)
--- a/src/symcipher/aes_ct64.c
+++ b/src/symcipher/aes_ct64.c
@@ -378,7 +378,7 @@ br_aes_ct64_skey_expand(uint64_t *skey,
 {
        unsigned u, v, n;
 
 {
        unsigned u, v, n;
 

-       n = (num_rounds + 1) << 2;
+       n = (num_rounds + 1) << 1;

        for (u = 0, v = 0; u < n; u ++, v += 4) {
                uint64_t x0, x1, x2, x3;
 
        for (u = 0, v = 0; u < n; u ++, v += 4) {
                uint64_t x0, x1, x2, x3;