granicus.if.org Git - openssl/commit

]> granicus.if.org Git - openssl/commit

author	Emilia Kasper <emilia@openssl.org>
	Tue, 18 Jul 2017 09:26:34 +0000 (11:26 +0200)
committer	Emilia Kasper <emilia@openssl.org>
	Tue, 18 Jul 2017 09:27:27 +0000 (11:27 +0200)
commit	5c5fef4d7aba0ef20cc88d7e34b22cec0d2881bb
tree	e90ae935ddcb93b8d5aedafde811156d1fc9a662	tree \| snapshot
parent	c63a5ea848cf0ccd3c991198ddff08b36c312340	commit \| diff

RSA_padding_check_PKCS1_type_2 is not constant time.

This is an inherent weakness of the padding mode. We can't make the
implementation constant time (see the comments in rsa_pk1.c), so add a
warning to the docs.

Reviewed-by: Rich Salz <rsalz@openssl.org>

doc/crypto/RSA_padding_add_PKCS1_type_1.pod		diff \| blob \| history
doc/crypto/RSA_public_encrypt.pod		diff \| blob \| history

Unnamed repository; edit this file 'description' to name the repository.

RSS Atom