Gilles Peskine 6acfc9cb4c mbedtls_ecp_gen_privkey_mx: remove the exception for all-zero
The library rejected an RNG input of all-bits-zero, which led to the
key 2^{254} (for Curve25519) having a 31/32 chance of being generated
compared to other keys. This had no practical impact because the
probability of non-compliance was 2^{-256}, but needlessly
complicated the code.

The exception was added in 98e28a74e33f32bcb855e16f8d5d2016b2102129 to
avoid the case where b - 1 wraps because b is 0. Instead, change the
comparison code to avoid calculating b - 1.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2021-06-02 21:31:24 +02:00
..
2021-03-04 14:34:50 +00:00
2021-04-20 21:46:29 +01:00
2021-04-15 11:19:47 +01:00
2021-04-15 11:19:47 +01:00
2021-04-07 12:45:35 +01:00
2021-03-29 14:20:18 +01:00
2021-04-07 12:45:35 +01:00
2021-03-29 14:20:18 +01:00
2021-04-07 12:45:35 +01:00
2021-04-07 12:45:35 +01:00
2021-04-15 11:19:47 +01:00
2021-04-15 11:19:47 +01:00
2021-04-15 11:19:47 +01:00
2020-11-25 13:10:50 +01:00
2020-11-25 13:10:50 +01:00
2021-03-10 18:17:12 +00:00
2021-04-15 11:19:47 +01:00
2021-04-15 11:19:47 +01:00
2021-04-15 11:19:47 +01:00
2021-04-15 11:19:47 +01:00