rsa/rsa_ossl.c: implement variant of "Smooth CRT-RSA."
authorAndy Polyakov <appro@openssl.org>
Fri, 10 Aug 2018 17:46:03 +0000 (19:46 +0200)
committerAndy Polyakov <appro@openssl.org>
Thu, 23 Aug 2018 20:20:35 +0000 (22:20 +0200)
commit41bfd5e7c8ac3a0874a94e4d15c006ad5eb48e59
tree5b2133320c0b11fc99f2d2024921a8d069777251
parentfcc4ee09473cac511eca90faa003661c7786e4f9
rsa/rsa_ossl.c: implement variant of "Smooth CRT-RSA."

In [most common] case of p and q being of same width, it's possible to
replace CRT modulo operations with Montgomery reductions. And those are
even fixed-length Montgomery reductions...

Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/6915)
crypto/rsa/rsa_ossl.c