diff options
| author | Theo Buehler <tb@cvs.openbsd.org> | 2023-07-28 10:05:17 +0000 |
|---|---|---|
| committer | Theo Buehler <tb@cvs.openbsd.org> | 2023-07-28 10:05:17 +0000 |
| commit | 71d0dcdec7f3382b2d98f7d1f3c3d81b129f21bf (patch) | |
| tree | fc06155e597c4fc7b614bd29cdfb449a146b9235 /lib/libcrypto/hidden | |
| parent | 32bad0f97c7676f11389b6f5cd0e698f082b717a (diff) | |
Make BN_BLINDING internal
RSA is pretty bad. In my most optimistic moments I dream of a world that
stopped using it. That won't happen during my lifetime, unfortunately.
Blinding is one way of making it a little less leaky. Unfortunately this
side-channel leak mitigation leaked out of the library for no good reason.
Let's at least fix that aspect of it.
ok jsing
Diffstat (limited to 'lib/libcrypto/hidden')
| -rw-r--r-- | lib/libcrypto/hidden/openssl/bn.h | 13 | ||||
| -rw-r--r-- | lib/libcrypto/hidden/openssl/rsa.h | 3 |
2 files changed, 2 insertions, 14 deletions
diff --git a/lib/libcrypto/hidden/openssl/bn.h b/lib/libcrypto/hidden/openssl/bn.h index 6c23a5c6d83..d58bd10672a 100644 --- a/lib/libcrypto/hidden/openssl/bn.h +++ b/lib/libcrypto/hidden/openssl/bn.h @@ -1,4 +1,4 @@ -/* $OpenBSD: bn.h,v 1.1 2023/07/08 12:21:58 beck Exp $ */ +/* $OpenBSD: bn.h,v 1.2 2023/07/28 10:05:16 tb Exp $ */ /* * Copyright (c) 2023 Bob Beck <beck@openbsd.org> * @@ -131,17 +131,6 @@ LCRYPTO_USED(BN_MONT_CTX_free); LCRYPTO_USED(BN_MONT_CTX_set); LCRYPTO_USED(BN_MONT_CTX_copy); LCRYPTO_USED(BN_MONT_CTX_set_locked); -LCRYPTO_USED(BN_BLINDING_new); -LCRYPTO_USED(BN_BLINDING_free); -LCRYPTO_USED(BN_BLINDING_update); -LCRYPTO_USED(BN_BLINDING_convert); -LCRYPTO_USED(BN_BLINDING_invert); -LCRYPTO_USED(BN_BLINDING_convert_ex); -LCRYPTO_USED(BN_BLINDING_invert_ex); -LCRYPTO_USED(BN_BLINDING_thread_id); -LCRYPTO_USED(BN_BLINDING_get_flags); -LCRYPTO_USED(BN_BLINDING_set_flags); -LCRYPTO_USED(BN_BLINDING_create_param); LCRYPTO_USED(get_rfc2409_prime_768); LCRYPTO_USED(get_rfc2409_prime_1024); LCRYPTO_USED(BN_get_rfc2409_prime_768); diff --git a/lib/libcrypto/hidden/openssl/rsa.h b/lib/libcrypto/hidden/openssl/rsa.h index f4342e21da0..ff47101a070 100644 --- a/lib/libcrypto/hidden/openssl/rsa.h +++ b/lib/libcrypto/hidden/openssl/rsa.h @@ -1,4 +1,4 @@ -/* $OpenBSD: rsa.h,v 1.1 2023/07/08 12:26:45 beck Exp $ */ +/* $OpenBSD: rsa.h,v 1.2 2023/07/28 10:05:16 tb Exp $ */ /* * Copyright (c) 2023 Bob Beck <beck@openbsd.org> * @@ -66,7 +66,6 @@ LCRYPTO_USED(RSA_sign_ASN1_OCTET_STRING); LCRYPTO_USED(RSA_verify_ASN1_OCTET_STRING); LCRYPTO_USED(RSA_blinding_on); LCRYPTO_USED(RSA_blinding_off); -LCRYPTO_USED(RSA_setup_blinding); LCRYPTO_USED(RSA_padding_add_PKCS1_type_1); LCRYPTO_USED(RSA_padding_check_PKCS1_type_1); LCRYPTO_USED(RSA_padding_add_PKCS1_type_2); |