crypto/openssl/crypto/ml_kem/ml_kem.c

1838

secret[i] = constant_time_select_8(mask, Kr[i], failure_key[i]);

crypto/openssl/crypto/rsa/rsa_oaep.c

316

db[i] = constant_time_select_8(mask, db[i + msg_index], db[i]);

crypto/openssl/crypto/rsa/rsa_oaep.c

320

to[i] = constant_time_select_8(mask, db[i + mdlen + 1], to[i]);

crypto/openssl/crypto/rsa/rsa_pk1.c

256

em[i] = constant_time_select_8(mask, em[i + msg_index], em[i]);

crypto/openssl/crypto/rsa/rsa_pk1.c

260

to[i] = constant_time_select_8(mask, em[i + RSA_PKCS1_PADDING_SIZE], to[i]);

crypto/openssl/crypto/rsa/rsa_pk1.c

510

to[j] = constant_time_select_8(good, from[i], synthetic[i]);

crypto/openssl/crypto/rsa/rsa_pk1.c

624

to[i] = constant_time_select_8(good,

crypto/openssl/include/internal/constant_time.h

470

*(outc + j) |= constant_time_select_8(mask, *(tablec++), 0);

crypto/openssl/include/internal/constant_time.h

87

static ossl_inline unsigned char constant_time_select_8(unsigned char mask,

crypto/openssl/ssl/record/methods/ssl3_cbc.c

415

b = constant_time_select_8(is_past_c, 0x80, b);

crypto/openssl/ssl/record/methods/ssl3_cbc.c

433

b = constant_time_select_8(is_block_b,

crypto/openssl/ssl/record/methods/tls_pad.c

284

aux3 = constant_time_select_8(mask, aux1, aux2);

crypto/openssl/ssl/record/methods/tls_pad.c

288

out[j++] = constant_time_select_8((unsigned char)(good & 0xff),

crypto/openssl/ssl/record/methods/tls_pad.c

304

out[i] = constant_time_select_8((unsigned char)(good & 0xff), out[i],

crypto/openssl/test/constant_time_test.c

167

if (!TEST_uint_eq(constant_time_select_8(CONSTTIME_TRUE_8, a, b), a))

crypto/openssl/test/constant_time_test.c

169

if (!TEST_uint_eq(constant_time_select_8(CONSTTIME_FALSE_8, a, b), b))