diff options
| author | Emilia Kasper <emilia@openssl.org> | 2017-07-18 11:26:34 +0200 |
|---|---|---|
| committer | Emilia Kasper <emilia@openssl.org> | 2017-07-18 11:27:27 +0200 |
| commit | 5c5fef4d7aba0ef20cc88d7e34b22cec0d2881bb (patch) | |
| tree | e90ae935ddcb93b8d5aedafde811156d1fc9a662 /config | |
| parent | c63a5ea848cf0ccd3c991198ddff08b36c312340 (diff) | |
RSA_padding_check_PKCS1_type_2 is not constant time.
This is an inherent weakness of the padding mode. We can't make the
implementation constant time (see the comments in rsa_pk1.c), so add a
warning to the docs.
Reviewed-by: Rich Salz <rsalz@openssl.org>
Diffstat (limited to 'config')
0 files changed, 0 insertions, 0 deletions