projects / openssl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 56c13d2) | patch
RSA_padding_check_PKCS1_type_2 is not constant time.
authorEmilia Kasper <emilia@openssl.org>
Tue, 18 Jul 2017 09:26:34 +0000 (11:26 +0200)
committerEmilia Kasper <emilia@openssl.org>
Tue, 18 Jul 2017 09:26:34 +0000 (11:26 +0200)
commitb9cdcb081c97846255cd0bf812b1ca294ddd7875
tree5f06d00bf4d82848fb83d85dc8929f271c738044tree | snapshot
parent56c13d2bfa1983d71bcfcc5dfaf3592c5c6978e2commit | diff
RSA_padding_check_PKCS1_type_2 is not constant time.

This is an inherent weakness of the padding mode. We can't make the
implementation constant time (see the comments in rsa_pk1.c), so add a
warning to the docs.

Reviewed-by: Rich Salz <rsalz@openssl.org>
doc/crypto/RSA_padding_add_PKCS1_type_1.pod diff | blob | history
doc/crypto/RSA_public_encrypt.pod diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.