MGASA-2020-0293

Updated mbedtls packages fix security vulnerabilities

Fix a side channel vulnerability in modular exponentiation that could reveal an RSA private key used in a secure enclave.

Fix side channel in mbedtlsecpcheckpubpriv() and mbedtlspkparsekey() / mbedtlspkparsekeyfile() (when loading a private key that didn't include the uncompressed public key), as well as mbedtlsecpmul() / mbedtlsecpmulrestartable() when called with a NULL frng argument. An attacker with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave) could fully recover the ECC private key.

Fix issue in Lucky 13 counter-measure that could make it ineffective when hardware accelerators were used (using one of the MBEDTLSSHAxxxALT macros). This would cause the original Lucky 13 attack to be possible in those configurations, allowing an active network attacker to recover plaintext after repeated timing measurements under some conditions.