Emilia Kasper 294d1e36c2 RT3066: rewrite RSA padding checks to be slightly more constant time. ... Also tweak s3_cbc.c to use new constant-time methods. Also fix memory leaks from internal errors in RSA_padding_check_PKCS1_OAEP_mgf1 This patch is based on the original RT submission by Adam Langley <agl@chromium.org>, as well as code from BoringSSL and OpenSSL. Reviewed-by: Kurt Roeckx <kurt@openssl.org>		2014-09-24 12:45:42 +02:00
..
.cvsignore
Makefile	RT3066: rewrite RSA padding checks to be slightly more constant time.	2014-09-24 12:45:42 +02:00
rsa_ameth.c	RT2626: Change default_bits from 1K to 2K	2014-09-08 17:21:04 -04:00
rsa_asn1.c
rsa_chk.c	crypto/rsa/rsa_chk.c: harmonize error codes.	2014-09-21 23:05:13 +02:00
rsa_crpt.c
rsa_depr.c
rsa_eay.c	RT2163: Remove some unneeded #include's	2014-08-18 12:50:00 -04:00
rsa_err.c	RT3066: rewrite RSA padding checks to be slightly more constant time.	2014-09-24 12:45:42 +02:00
rsa_gen.c
rsa_lib.c	Add functions returning security bits.	2014-03-28 14:49:04 +00:00
rsa_locl.h
rsa_none.c	RT2163: Remove some unneeded #include's	2014-08-18 12:50:00 -04:00
rsa_null.c
rsa_oaep.c	RT3066: rewrite RSA padding checks to be slightly more constant time.	2014-09-24 12:45:42 +02:00
rsa_pk1.c	RT3066: rewrite RSA padding checks to be slightly more constant time.	2014-09-24 12:45:42 +02:00
rsa_pmeth.c
rsa_prn.c
rsa_pss.c
rsa_saos.c
rsa_sign.c
rsa_ssl.c
rsa_test.c
rsa_x931.c
rsa_x931g.c
rsa.h	RT3066: rewrite RSA padding checks to be slightly more constant time.	2014-09-24 12:45:42 +02:00