f7ff05a366
of SSLv3 and TLS CBC records constant time. Without this, a timing side channel can be used to build a padding oracle and mount Vaudenay's attack. The patch is contributed by Adam Langley <agl@chromium.org>. r=rrelyea,ryan.sleevi. Modified Files: lib/freebl/blapi.h lib/freebl/ldvector.c lib/freebl/loader.c lib/freebl/loader.h lib/freebl/manifest.mn lib/freebl/md5.c lib/freebl/rawhash.c lib/freebl/sha512.c lib/freebl/sha_fast.c lib/freebl/sha_fast.h lib/nss/nss.def lib/pk11wrap/pk11obj.c lib/pk11wrap/pk11pub.h lib/softoken/manifest.mn lib/softoken/pkcs11.c lib/softoken/pkcs11c.c lib/softoken/pkcs11i.h lib/ssl/ssl3con.c lib/util/hasht.h lib/util/pkcs11n.h Added Files: lib/freebl/hmacct.c lib/freebl/hmacct.h lib/softoken/sftkhmac.c git-svn-id: svn://10.0.0.236/trunk@264692 18797224-902f-48f8-a5cc-f745e15eee43