projects / openssl / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ff0426c) | patch
RSA_padding_check_PKCS1_type_2 is not constant time.
authorEmilia Kasper <emilia@openssl.org>
Mon, 17 Jul 2017 14:47:13 +0000 (16:47 +0200)
committerEmilia Kasper <emilia@openssl.org>
Tue, 18 Jul 2017 09:16:39 +0000 (11:16 +0200)
commit1e3f62a3823f7e3db9d403f724fd9d66f5b04cf8
tree979f2a1a496cc1084ea475f10aef05d9d3fc028ftree | snapshot
parentff0426cc94df5e6dd25b8cfd6f9f7c840264a400commit | diff
RSA_padding_check_PKCS1_type_2 is not constant time.

This is an inherent weakness of the padding mode. We can't make the
implementation constant time (see the comments in rsa_pk1.c), so add a
warning to the docs.

Reviewed-by: Rich Salz <rsalz@openssl.org>
doc/man3/RSA_padding_add_PKCS1_type_1.pod diff | blob | history
doc/man3/RSA_public_encrypt.pod diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.