mozilla/security/nss/lib/freebl hmacct.c hmacct.h blapi.h ldvector.c loader.c loader.h manifest.mn md5.c rawhash.c sha512.c sha_fast.c sha_fast.h

Diffs: http://bonsai.mozilla.org/cvsview2.cgi?command=DIRECTORY&subdir=mozilla/security/nss/lib/freebl&files=hmacct.c:hmacct.h:blapi.h:ldvector.c:loader.c:loader.h:manifest.mn:md5.c:rawhash.c:sha512.c:sha_fast.c:sha_fast.h&root=/cvsroot

Changes committed by wtc%google.com:

Update of /cvsroot/mozilla/security/nss/lib/freebl
In directory cvs1.dmz.scl3.mozilla.com:/tmp/cvs-serv30785/lib/freebl

Modified Files:
	blapi.h ldvector.c loader.c loader.h manifest.mn md5.c 
	rawhash.c sha512.c sha_fast.c sha_fast.h 
Added Files:
	hmacct.c hmacct.h 
Log Message:
Bug 822365: Make CBC decoding constant time. This patch makes the decoding
of SSLv3 and TLS CBC records constant time. Without this, a timing side
channel can be used to build a padding oracle and mount Vaudenay's attack.
The patch is contributed by Adam Langley <[email protected]>.
r=rrelyea,ryan.sleevi.
Modified Files:
	lib/freebl/blapi.h lib/freebl/ldvector.c lib/freebl/loader.c 
	lib/freebl/loader.h lib/freebl/manifest.mn lib/freebl/md5.c 
	lib/freebl/rawhash.c lib/freebl/sha512.c lib/freebl/sha_fast.c 
	lib/freebl/sha_fast.h lib/nss/nss.def lib/pk11wrap/pk11obj.c 
	lib/pk11wrap/pk11pub.h lib/softoken/manifest.mn 
	lib/softoken/pkcs11.c lib/softoken/pkcs11c.c 
	lib/softoken/pkcs11i.h lib/ssl/ssl3con.c lib/util/hasht.h 
	lib/util/pkcs11n.h 
Added Files:
	lib/freebl/hmacct.c lib/freebl/hmacct.h 
	lib/softoken/sftkhmac.c