Clear secret-dependent variables in `_ecmult_const_xonly` #1934

pull theStack wants to merge 1 commits into bitcoin-core:master from theStack:ecmult_const_xonly-clear-secret-dependent-vars changing 1 files +4 −0

theStack commented at 4:07 PM on September 9, 2026: contributor

While working on the refactoring PR #1933, I noticed that there is no _gej clearing of the point multiplication result in _ecmult_const_xonly (apparently this was missed back then when looking for instances in #1579 (comment), likely because in this case there is no _ge_set_gej call involved).

Note that for _ecmult_const itself there is already a separate PR: https://github.com/bitcoin-core/secp256k1/pull/1885
Clear secret-dependent variables in `_ecmult_const_xonly` 9e65f6ac9b
theStack added the label side-channel on Sep 9, 2026
real-or-random approved
real-or-random commented at 4:18 PM on September 9, 2026: contributor

utACK 9e65f6ac9b714b85bf03338ffb900a6aeebed800
real-or-random added the label tweak/refactor on Sep 9, 2026
theStack merged this on Sep 23, 2026
theStack closed this on Sep 23, 2026
theStack deleted the branch on Sep 23, 2026

Contributors

theStack

real-or-random

Labels

side-channel tweak/refactor

Linked (view graph)

#1579 Clear sensitive memory without getting optimized out (revival of #636)#1885 Clear scalar variables computed from scalar in `secp256k1_ecmult_const`#1933 refactor: introduce `ecmult_const_ge` helper (preventing accidential gej leaks)