diff options
| author | beck <> | 2017-01-25 06:15:44 +0000 |
|---|---|---|
| committer | beck <> | 2017-01-25 06:15:44 +0000 |
| commit | f741256ec38e0e3f1664f26f154e27323aa56472 (patch) | |
| tree | f47c7a81955397655f194db5ae669044f33423bd /src/regress/lib/libcrypto/rsa/rsa_test.c | |
| parent | 675bc29ef5175347c75458da50c7b3db6a21b4c3 (diff) | |
| download | openbsd-f741256ec38e0e3f1664f26f154e27323aa56472.tar.gz openbsd-f741256ec38e0e3f1664f26f154e27323aa56472.tar.bz2 openbsd-f741256ec38e0e3f1664f26f154e27323aa56472.zip | |
Construct a BN_gcd_nonct, based on BN_mod_inverse_no_branch, as suggested
by Alejandro Cabrera <aldaya@gmail.com> to avoid the possibility of a
sidechannel timing attack during RSA private key generation.
Modify BN_gcd to become not visible under LIBRESSL_INTERNAL and force
the use of the _ct or _nonct versions of the function only within
the library.
ok jsing@
Diffstat (limited to 'src/regress/lib/libcrypto/rsa/rsa_test.c')
0 files changed, 0 insertions, 0 deletions