Upgrade chrome's OpenSSL to same version Android ships with.

openssl/crypto/ecdsa/ecs_ossl.c

 /* crypto/ecdsa/ecs_ossl.c */
 /*
  * Written by Nils Larsch for the OpenSSL project
  */
 /* ====================================================================
  * Copyright (c) 1998-2004 The OpenSSL Project.  All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
@@ skipping 126 matching lines @@
                 /* get random k */      
                 do
                         if (!BN_rand_range(k, order))
                         {
                                 ECDSAerr(ECDSA_F_ECDSA_SIGN_SETUP,
                                  ECDSA_R_RANDOM_NUMBER_GENERATION_FAILED);      
                                 goto err;
                         }
                 while (BN_is_zero(k));
 
+                /* We do not want timing information to leak the length of k,
+                 * so we compute G*k using an equivalent scalar of fixed
+                 * bit-length. */
+
+                if (!BN_add(k, k, order)) goto err;
+                if (BN_num_bits(k) <= BN_num_bits(order))
+                        if (!BN_add(k, k, order)) goto err;
+
                 /* compute r the x-coordinate of generator * k */
                 if (!EC_POINT_mul(group, tmp_point, k, NULL, NULL, ctx))
                 {
                         ECDSAerr(ECDSA_F_ECDSA_SIGN_SETUP, ERR_R_EC_LIB);
                         goto err;
                 }
                 if (EC_METHOD_get_field_type(EC_GROUP_method_of(group)) == NID_X9_62_prime_field)
                 {
                         if (!EC_POINT_get_affine_coordinates_GFp(group,
                                 tmp_point, X, NULL, ctx))
@@ skipping 306 matching lines @@
         }
         /*  if the signature is correct u1 is equal to sig->r */
         ret = (BN_ucmp(u1, sig->r) == 0);
 err:
         BN_CTX_end(ctx);
         BN_CTX_free(ctx);
         if (point)
                 EC_POINT_free(point);
         return ret;
 }