CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2023/07/28 04:05:17
Modified files:
lib/libcrypto : Symbols.list Symbols.namespace
lib/libcrypto/bn: bn.h bn_blind.c bn_local.h
lib/libcrypto/hidden/openssl: bn.h rsa.h
lib/libcrypto/rsa: rsa.h rsa_crpt.c rsa_lib.c rsa_local.h
Log message:
Make BN_BLINDING internal
RSA is pretty bad. In my most optimistic moments I dream of a world that
stopped using it. That won't happen during my lifetime, unfortunately.
Blinding is one way of making it a little less leaky. Unfortunately this
side-channel leak mitigation leaked out of the library for no good reason.
Let's at least fix that aspect of it.
ok jsing