tree 2dfd45daccd828491f4565961a31499ca5d877cb
parent bbad8797486d2fb07788e6ba4422e65215fff5c2
author Ken MacKay <kmackay@gmail.com> 1435297319 -0700
committer Ken MacKay <kmackay@gmail.com> 1435297319 -0700

Regularize the bitcount for the private key.

This is so that attackers cannot use a side channel attack to learn the number of leading zeros. This causes about 1% slower keypair generation and ECDH.

Note: this is not done for secp160r1, since it would have a larger performance impact (about 2% slower on average) and requires the vli_xxx_n functions, leading to a significant increase in code size.