rsa: fix constant-time test for decompose_ret()

We were passing input, while only combined_ret is marked as secret...

Signed-off-by: Manuel Pégourié-Gonnard <[email protected]>
This commit is contained in:
Manuel Pégourié-Gonnard
2026-06-11 12:26:16 +02:00
parent 29108ed8ce
commit 9b3d8dc174
+2 -2
View File
@@ -173,7 +173,7 @@ void rsa_decrypt_decompose_ret(int input,
int actual_ret = mbedtls_rsa_decrypt_decompose_ret(sensitive_in_1, problem_1,
sensitive_in_2, problem_2,
input,
combined_ret,
&actual_problem);
TEST_EQUAL(actual_problem, expected_problem);
@@ -182,7 +182,7 @@ void rsa_decrypt_decompose_ret(int input,
/* Check invariant when there's no translation, only separation */
actual_ret = mbedtls_rsa_decrypt_decompose_ret(sensitive_in_1, sensitive_in_1,
sensitive_in_2, sensitive_in_2,
input,
combined_ret,
&actual_problem);
TEST_EQUAL(actual_ret, expected_ret);
if (expected_problem == problem_1) {