openssl/crypto/rsa
Bernd Edlinger 237bc6c997 Remove unnecessary loop in pkey_rsa_decrypt.
It is not necessary to remove leading zeros here because
RSA_padding_check_PKCS1_OAEP_mgf1 appends them again. As this was not done
in constant time, this might have leaked timing information.

Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Andy Polyakov <appro@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/3313)
2017-04-26 20:47:37 -04:00
..
build.info Make default_method mostly compile-time 2017-04-07 12:19:46 -04:00
rsa_ameth.c Add custom sig_info setting for RSA-PSS 2017-04-25 22:12:34 +01:00
rsa_asn1.c ASN.1: adapt our use of INTxx et al by making them explicitely embedded 2017-04-13 10:23:31 +02:00
rsa_chk.c
rsa_crpt.c
rsa_depr.c
rsa_err.c Make default_method mostly compile-time 2017-04-07 12:19:46 -04:00
rsa_gen.c
rsa_lib.c Make default_method mostly compile-time 2017-04-07 12:19:46 -04:00
rsa_locl.h Act on deprecation of LONG and ZLONG, step 2 2017-04-10 12:11:00 +02:00
rsa_meth.c
rsa_none.c
rsa_oaep.c
rsa_ossl.c Make default_method mostly compile-time 2017-04-07 12:19:46 -04:00
rsa_pk1.c
rsa_pmeth.c Remove unnecessary loop in pkey_rsa_decrypt. 2017-04-26 20:47:37 -04:00
rsa_prn.c
rsa_pss.c
rsa_saos.c
rsa_sign.c
rsa_ssl.c
rsa_x931.c
rsa_x931g.c