summaryrefslogtreecommitdiffstats
path: root/crypto/evp/c_allc.c
diff options
context:
space:
mode:
authorAndy Polyakov <appro@openssl.org>2013-02-02 19:29:59 +0100
committerDr. Stephen Henson <steve@openssl.org>2013-02-06 14:19:10 +0000
commit9970308c88dda1e55a10c970b73ff64e8f678d8f (patch)
treef18dc43efebdaf756a58b67c18194350c6f0997c /crypto/evp/c_allc.c
parent2aec073a529f8d8dc0e625b9c444db9de7b46873 (diff)
e_aes_cbc_hmac_sha1.c: address the CBC decrypt timing issues.
Address CBC decrypt timing issues and reenable the AESNI+SHA1 stitch. (cherry picked from commit 125093b59f3c2a2d33785b5563d929d0472f1721)
Diffstat (limited to 'crypto/evp/c_allc.c')
-rw-r--r--crypto/evp/c_allc.c2
1 files changed, 0 insertions, 2 deletions
diff --git a/crypto/evp/c_allc.c b/crypto/evp/c_allc.c
index e230e6081e..2a45d435e5 100644
--- a/crypto/evp/c_allc.c
+++ b/crypto/evp/c_allc.c
@@ -195,13 +195,11 @@ void OpenSSL_add_all_ciphers(void)
EVP_add_cipher(EVP_aes_256_xts());
EVP_add_cipher_alias(SN_aes_256_cbc,"AES256");
EVP_add_cipher_alias(SN_aes_256_cbc,"aes256");
-#if 0 /* Disabled because of timing side-channel leaks. */
#if !defined(OPENSSL_NO_SHA) && !defined(OPENSSL_NO_SHA1)
EVP_add_cipher(EVP_aes_128_cbc_hmac_sha1());
EVP_add_cipher(EVP_aes_256_cbc_hmac_sha1());
#endif
#endif
-#endif
#ifndef OPENSSL_NO_CAMELLIA
EVP_add_cipher(EVP_camellia_128_ecb());