diff options
author | bcook <> | 2016-06-30 02:02:06 +0000 |
---|---|---|
committer | bcook <> | 2016-06-30 02:02:06 +0000 |
commit | 3ce2fddbbb0fbded19721d5da476dfdfecb1e48b (patch) | |
tree | 0ceecace65c38593a01c1d41cce469bd98529f43 /src/lib/libcrypto/dh/dh.h | |
parent | eac403b2ae70a8e948d7db823d992cc131392d78 (diff) | |
download | openbsd-3ce2fddbbb0fbded19721d5da476dfdfecb1e48b.tar.gz openbsd-3ce2fddbbb0fbded19721d5da476dfdfecb1e48b.tar.bz2 openbsd-3ce2fddbbb0fbded19721d5da476dfdfecb1e48b.zip |
Remove flags for disabling constant-time operations.
This removes support for DSA_FLAG_NO_EXP_CONSTTIME, DH_FLAG_NO_EXP_CONSTTIME,
and RSA_FLAG_NO_CONSTTIME flags, making all of these operations unconditionally
constant-time.
Based on the original patch by César Pereid. ok beck@
Diffstat (limited to 'src/lib/libcrypto/dh/dh.h')
-rw-r--r-- | src/lib/libcrypto/dh/dh.h | 9 |
1 files changed, 1 insertions, 8 deletions
diff --git a/src/lib/libcrypto/dh/dh.h b/src/lib/libcrypto/dh/dh.h index a20467c9d0..631cd5c685 100644 --- a/src/lib/libcrypto/dh/dh.h +++ b/src/lib/libcrypto/dh/dh.h | |||
@@ -1,4 +1,4 @@ | |||
1 | /* $OpenBSD: dh.h,v 1.16 2014/06/12 15:49:28 deraadt Exp $ */ | 1 | /* $OpenBSD: dh.h,v 1.17 2016/06/30 02:02:06 bcook Exp $ */ |
2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) | 2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) |
3 | * All rights reserved. | 3 | * All rights reserved. |
4 | * | 4 | * |
@@ -78,13 +78,6 @@ | |||
78 | #endif | 78 | #endif |
79 | 79 | ||
80 | #define DH_FLAG_CACHE_MONT_P 0x01 | 80 | #define DH_FLAG_CACHE_MONT_P 0x01 |
81 | #define DH_FLAG_NO_EXP_CONSTTIME 0x02 /* new with 0.9.7h; the built-in DH | ||
82 | * implementation now uses constant time | ||
83 | * modular exponentiation for secret exponents | ||
84 | * by default. This flag causes the | ||
85 | * faster variable sliding window method to | ||
86 | * be used for all exponents. | ||
87 | */ | ||
88 | 81 | ||
89 | /* If this flag is set the DH method is FIPS compliant and can be used | 82 | /* If this flag is set the DH method is FIPS compliant and can be used |
90 | * in FIPS mode. This is set in the validated module method. If an | 83 | * in FIPS mode. This is set in the validated module method. If an |