ext/gmp: Add gmp_powm_sec()

[LamentXU123]

I am currently migrating a cryptographic lib (RSA signature & decryption) from python to PHP, relying on ext-gmp. Now, I want to compute modular exponentiation with secret private exponents. For RSA decryption and signing I need to compute base^d mod N where d is a secret private exponent.

Ah, I need to consider security issue because clearly gmp_powm (implemented with mpz_powm in libgmp) leaks exponent bits via timing and cache side channels, which creates a security vulnerability.

Now, we've got mpz_powm_sec in gmp >= 5.0 which perfectly solve my issue. And, is used by gmpy2 (a very popular python lib for gmp, and is the lib my original python app relies on). In gmpy2, we have powmod_sec and powmod. It is also supported in .Net apps (and more...). However in PHP we only have gmp_powm.

...And I need to implement the securer version by myself!

So let's expose the gmp API mpz_powm_sec to userland. It is really useful. Any pow calculation which requires cryptographic security should use this instead of mpz_powm

And as a direct exposure to the GMP internal API, this doesn't requires a RFC.

[iliaal]

The three guards match mpz_powm_sec()'s preconditions exactly (exp > 0, odd non-zero modulus), so nothing reaches GMP's DIVIDE_BY_ZERO. Clean.

[Girgias]

Minor nit but LGTM

[LamentXU123]

The CI failure is unrelated.

Resolved

[adapik]

I've faced the same problem in my cryptographic library. I would appreciate it if this PR could be approved.

[Girgias]

If CI is green.

[LamentXU123]

Thanks :)