Enforce blinding on RSA operations involving private keys.

From http://www.openssl.org/~geoff, modified to be enabled at all times.

1 files changed, 4 insertions, 0 deletions

diff --git a/src/lib/libcrypto/rsa/rsa_lib.c b/src/lib/libcrypto/rsa/rsa_lib.c
index 93235744f7..f71870a338 100644
--- a/src/lib/libcrypto/rsa/rsa_lib.c
+++ b/src/lib/libcrypto/rsa/rsa_lib.c
@@ -181,6 +181,10 @@ RSA *RSA_new_method(ENGINE *engine)
                 OPENSSL_free(ret);
                 ret=NULL;
                 }
+
+        /* Enforce blinding. */
+        ret->flags |= RSA_FLAG_BLINDING;
+
         return(ret);
         }