openbsd/src/lib/libcrypto/rsa/rsa_eay.c, branch OPENBSD_7_9A mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=OPENBSD_7_92025-05-10T05:54:39+00:00Use err_local.h rather than err.h in most places2025-05-10T05:54:39+00:00tb2025-05-10T05:54:39+00:00urn:sha1:41e8f99dd1625a9f0c80ce9d4383e95b18e85709
ok jsing
Rework BN_BLINDING to use pthread_t directly2023-08-09T12:09:06+00:00tb2023-08-09T12:09:06+00:00urn:sha1:f6afd562e52c37d3b28855caea8e1d7b0cf643c5
Instead of CRYPTO_THREADID, which passes pthread_via through unsigned long,
we can use pthread_self() and pthread_equal() directly. This commit keeps
using the awkward 'local' nomenclature as that is used throughout the rsa
code. This will be changed after the blinding code will have been fully
merged into rsa_blinding.c.
ok jsing
Merge remainder of rsa_crpt.c into rsa_eay.c2023-08-09T09:32:23+00:00tb2023-08-09T09:32:23+00:00urn:sha1:5beb145459dc0be8af47bc0b606d828fbe0e0910
Most of these are one line wrappers around methods implemented in rsa_eay.c
by default.
Drop the _ex from BN_BLINDING_{convert,invert}_ex()2023-08-02T08:44:38+00:00tb2023-08-02T08:44:38+00:00urn:sha1:0a5b92c72e6db90ab62220b775b714885b4dbb12Hide symbols in rsa2023-07-08T12:26:45+00:00beck2023-07-08T12:26:45+00:00urn:sha1:a651e5a57705b3b3f225ed686118217a44e93036
ok tb@
Rename RSA_eay_* to rsa_*.2023-07-07T10:11:23+00:00jsing2023-07-07T10:11:23+00:00urn:sha1:10c810ab2ccd672826b12029bdf6010b52386ac7
Rename all of the RSA_eay_* functions to rsa_*, as well as changing the
method name (and naming). Reorder things slightly so that we can remove
all of the prototypes for static functions.
ok tb@
Add back support for RSA_X931_PADDING2023-05-05T12:21:44+00:00tb2023-05-05T12:21:44+00:00urn:sha1:c167f76677a4e5f366fabdcac0782677114c0a66
This makes the custom stalt stack work again.
Tested by robert as part of a larger diff
ok jsing
Stop supporting the long-retired X9.31 standard2023-04-15T18:48:52+00:00tb2023-04-15T18:48:52+00:00urn:sha1:252c3b7366e10df7f94c0f10ec01513675fac0a3
This isolates the three API functions from the library so they can be
easily removed and any attempt to use RSA_X931_PADDING mode will now
result in an error.
ok jsing
Add a few missing braces2023-04-05T11:31:38+00:00tb2023-04-05T11:31:38+00:00urn:sha1:1ef8be17fbacb074d183be6f8f16ed7a4e6b5037
ok jsing
Set up the RSA's _method_mod_n before the initial blinding2023-04-05T11:30:12+00:00tb2023-04-05T11:30:12+00:00urn:sha1:ef668f6efd59ba2a39910b06cb34317de568940f
As observed by Bernd Edlinger, the main part of the RSA timing leak that was
recently made public is that the initial blinding isn't done with Montgomery
exponentiation but rather with plain exponentiation.
Pull up the initialization of the cached Montgomery context to ensure we use
Montgomery exponentiation. Do this for private_{de,en}crypt(). Interestingly,
the latter was fixed in OpenSSL a while ago by Andy Polyakov as part of the
"smooth CRT-RSA" addition.
If this code was anything but completely insane this would never have been
an issue in the first place. But it's libcrypto...
ok jsing