diff options
| author | tb <> | 2023-08-08 13:09:28 +0000 |
|---|---|---|
| committer | tb <> | 2023-08-08 13:09:28 +0000 |
| commit | 63944d78d9b4693d184874011c01ed8c45b91df2 (patch) | |
| tree | 53e2912d8befdb105ede8dcdcf70f4b83e3fd1b1 /src/lib/libcrypto/bn/bn_blind.c | |
| parent | 979d379b4cd6c6604ce566cb56bd9b4533b74409 (diff) | |
| download | openbsd-63944d78d9b4693d184874011c01ed8c45b91df2.tar.gz openbsd-63944d78d9b4693d184874011c01ed8c45b91df2.tar.bz2 openbsd-63944d78d9b4693d184874011c01ed8c45b91df2.zip | |
Remove ECDSA nonce padding kludge
This was a workaround due to the historically non-constant time scalar
multiplication in the EC code. Since Brumley and Tuveri implemented the
Montgomery ladder, this is no longer useful and should have been removed
a long time ago, as it now does more harm than good.
Keep the preallocations as they still help hiding some timing info.
ok jsing
Diffstat (limited to 'src/lib/libcrypto/bn/bn_blind.c')
0 files changed, 0 insertions, 0 deletions