boringssl/crypto/rsa
Brian Smith 24493a4ff4 Always cache Montgomery contexts in RSA.
Simplify the code by always caching Montgomery contexts in the RSA
structure, regardless of the |RSA_FLAG_CACHE_PUBLIC| and
|RSA_FLAG_CACHE_PRIVATE| flags. Deprecate those flags.

Now that we do this no more than once per key per RSA exponent, the
private key exponents better because the initialization of the
Montgomery contexts isn't perfectly side-channel protected.

Change-Id: I4fbcfec0f2f628930bfeb811285b0ae3d103ac5e
Reviewed-on: https://boringssl-review.googlesource.com/7521
Reviewed-by: David Benjamin <davidben@google.com>
2016-03-25 20:04:24 +00:00
..
blinding.c Fix error handling in |bn_blinding_update|. 2016-03-21 20:26:21 +00:00
CMakeLists.txt Add a run_tests target to run all tests. 2015-10-26 20:33:44 +00:00
internal.h Always use |BN_mod_exp_mont|/|BN_mod_exp_mont_consttime| in RSA. 2016-03-08 22:30:19 +00:00
padding.c Make local functions static. 2016-03-20 16:37:58 +00:00
rsa_asn1.c Fix i2d_RSAPrivateKey, i2d_RSAPublicKey memory leaks 2016-03-07 15:48:21 +00:00
rsa_impl.c Always cache Montgomery contexts in RSA. 2016-03-25 20:04:24 +00:00
rsa_test.cc Refuse to parse RSA pubkeys with invalid exponents. 2015-12-21 23:49:02 +00:00
rsa.c Align with upstream's error strings, take two. 2016-03-15 16:02:12 +00:00