Update to NSS 3.14.3 Beta 1 for the TLS CBC constant-time

mozilla/security/nss/lib/freebl/sha_fast.h

Index: mozilla/security/nss/lib/freebl/sha_fast.h
===================================================================
--- mozilla/security/nss/lib/freebl/sha_fast.h	(revision 180595)
+++ mozilla/security/nss/lib/freebl/sha_fast.h	(working copy)
@@ -147,12 +147,12 @@
     SHA_STORE(3); \
     SHA_STORE(4); \
   } else { \
-    ctx->u.w[0] = SHA_HTONL(ctx->H[0]); \
-    ctx->u.w[1] = SHA_HTONL(ctx->H[1]); \
-    ctx->u.w[2] = SHA_HTONL(ctx->H[2]); \
-    ctx->u.w[3] = SHA_HTONL(ctx->H[3]); \
-    ctx->u.w[4] = SHA_HTONL(ctx->H[4]); \

[wtc, 2013/02/08 02:17:52]

Why is it OK to change SHA_STORE_RESULT to *not* modify
the ctx->u.w array?

[agl, 2013/02/08 02:26:03]

SHA_STORE_RESULT is used in End and EndRaw. Previously, End was destructive -
once you called it, you couldn't add more data to the hash. (Not the mention
that it appends the hash padding). Making it non-destructive is thus making it
more general.

-    memcpy(hashout, ctx->u.w, SHA1_LENGTH); \
+    tmpbuf[0] = SHA_HTONL(ctx->H[0]); \
+    tmpbuf[1] = SHA_HTONL(ctx->H[1]); \
+    tmpbuf[2] = SHA_HTONL(ctx->H[2]); \
+    tmpbuf[3] = SHA_HTONL(ctx->H[3]); \
+    tmpbuf[4] = SHA_HTONL(ctx->H[4]); \
+    memcpy(hashout, tmpbuf, SHA1_LENGTH); \
   }
 
 #else