mozilla/security/nss/lib/softoken sftkhmac.c manifest.mn pkcs11.c pkcs11c.c pkcs11i.h

Diffs: http://bonsai.mozilla.org/cvsview2.cgi?command=DIRECTORY&subdir=mozilla/security/nss/lib/softoken&files=sftkhmac.c:manifest.mn:pkcs11.c:pkcs11c.c:pkcs11i.h&root=/cvsroot

Changes committed by wtc%google.com:

Update of /cvsroot/mozilla/security/nss/lib/softoken
In directory cvs1.dmz.scl3.mozilla.com:/tmp/cvs-serv30785/lib/softoken

Modified Files:
	manifest.mn pkcs11.c pkcs11c.c pkcs11i.h 
Added Files:
	sftkhmac.c 
Log Message:
Bug 822365: Make CBC decoding constant time. This patch makes the decoding
of SSLv3 and TLS CBC records constant time. Without this, a timing side
channel can be used to build a padding oracle and mount Vaudenay's attack.
The patch is contributed by Adam Langley <[email protected]>.
r=rrelyea,ryan.sleevi.
Modified Files:
	lib/freebl/blapi.h lib/freebl/ldvector.c lib/freebl/loader.c 
	lib/freebl/loader.h lib/freebl/manifest.mn lib/freebl/md5.c 
	lib/freebl/rawhash.c lib/freebl/sha512.c lib/freebl/sha_fast.c 
	lib/freebl/sha_fast.h lib/nss/nss.def lib/pk11wrap/pk11obj.c 
	lib/pk11wrap/pk11pub.h lib/softoken/manifest.mn 
	lib/softoken/pkcs11.c lib/softoken/pkcs11c.c 
	lib/softoken/pkcs11i.h lib/ssl/ssl3con.c lib/util/hasht.h 
	lib/util/pkcs11n.h 
Added Files:
	lib/freebl/hmacct.c lib/freebl/hmacct.h 
	lib/softoken/sftkhmac.c