kris/boringssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
0aa0767340
boringssl/ssl
History
David Benjamin 0aa0767340 Improve constant-time padding check in RSA key exchange. 
Although the PKCS#1 padding check is internally constant-time, it is not
constant time at the crypto/ ssl/ API boundary. Expose a constant-time
RSA_message_index_PKCS1_type_2 function and integrate it into the
timing-sensitive portion of the RSA key exchange logic.

Change-Id: I6fa64ddc9d65564d05529d9b2985da7650d058c3
Reviewed-on: https://boringssl-review.googlesource.com/1301
Reviewed-by: Adam Langley <agl@google.com>
2014-07-25 20:25:15 +00:00
..
pqueue Move public headers to include/openssl/ 2014-07-14 22:42:18 +00:00
test Change CCS_OK to EXPECT_CCS. 2014-07-25 17:58:58 +00:00
CMakeLists.txt Fix magic SSL reason codes. 2014-07-16 18:54:06 +00:00
d1_both.c Make init_msg a uint8_t*. 2014-07-14 21:43:20 +00:00
d1_clnt.c Remove ssl3_check_finished. 2014-07-23 15:52:38 +00:00
d1_enc.c Remove crypto/comp and SSL_COMP support code. 2014-06-24 17:22:06 +00:00
d1_lib.c DTLS: fix memory leak when allocation fails. 2014-06-26 17:46:27 -07:00
d1_meth.c Inital import. 2014-06-20 13:17:32 -07:00
d1_pkt.c Remove heartbeat extension. 2014-06-26 20:48:19 +00:00
d1_srtp.c Fix typo in DTLS-SRTP extension parsing. 2014-07-18 00:52:51 +00:00
d1_srvr.c Don't use the RSA key exchange with a signing-only key. 2014-07-24 21:35:40 +00:00
s3_both.c Change CCS_OK to EXPECT_CCS. 2014-07-25 17:58:58 +00:00
s3_cbc.c Remove OPENSSL_FIPS blocks. 2014-07-07 20:31:50 +00:00
s3_clnt.c Change CCS_OK to EXPECT_CCS. 2014-07-25 17:58:58 +00:00
s3_enc.c Remove support code for export cipher suites. 2014-07-24 21:14:08 +00:00
s3_lib.c Don't use the RSA key exchange with a signing-only key. 2014-07-24 21:35:40 +00:00
s3_meth.c Inital import. 2014-06-20 13:17:32 -07:00
s3_pkt.c Change CCS_OK to EXPECT_CCS. 2014-07-25 17:58:58 +00:00
s3_srvr.c Improve constant-time padding check in RSA key exchange. 2014-07-25 20:25:15 +00:00
s23_clnt.c Remove get_cipher_by_char and put_cipher_by_char. 2014-07-24 21:10:29 +00:00
s23_lib.c Remove some remnants of SSLv2 support. 2014-07-24 21:10:41 +00:00
s23_meth.c Inital import. 2014-06-20 13:17:32 -07:00
s23_pkt.c Inital import. 2014-06-20 13:17:32 -07:00
s23_srvr.c Remove OPENSSL_FIPS blocks. 2014-07-07 20:31:50 +00:00
ssl_algs.c Inital import. 2014-06-20 13:17:32 -07:00
ssl_asn1.c unifdef OPENSSL_NO_PSK. 2014-07-24 21:11:05 +00:00
ssl_cert.c Don't use the RSA key exchange with a signing-only key. 2014-07-24 21:35:40 +00:00
ssl_ciph.c Remove support code for export cipher suites. 2014-07-24 21:14:08 +00:00
ssl_error.c Change CCS_OK to EXPECT_CCS. 2014-07-25 17:58:58 +00:00
ssl_lib.c Don't use the RSA key exchange with a signing-only key. 2014-07-24 21:35:40 +00:00
ssl_locl.h Change CCS_OK to EXPECT_CCS. 2014-07-25 17:58:58 +00:00
ssl_rsa.c Introduce EVP_PKEY_is_opaque to replace RSA_METHOD_FLAG_NO_CHECK. 2014-07-18 23:35:04 +00:00
ssl_sess.c unifdef OPENSSL_NO_PSK. 2014-07-24 21:11:05 +00:00
ssl_stat.c Consolidate CCS_OK paths in s3_clnt.c. 2014-07-25 17:49:12 +00:00
ssl_test.c Fix magic SSL reason codes. 2014-07-16 18:54:06 +00:00
ssl_txt.c unifdef OPENSSL_NO_PSK. 2014-07-24 21:11:05 +00:00
t1_clnt.c Inital import. 2014-06-20 13:17:32 -07:00
t1_enc.c Remove support code for export cipher suites. 2014-07-24 21:14:08 +00:00
t1_lib.c Pass parameters to tls1_process_sigalgs as a CBS. 2014-07-24 21:18:38 +00:00
t1_meth.c Inital import. 2014-06-20 13:17:32 -07:00
t1_reneg.c Port ssl3_get_client_hello to CBS. 2014-07-15 18:30:09 +00:00
t1_srvr.c Inital import. 2014-06-20 13:17:32 -07:00