9f05de4ebb
Simplify the code, and in particular make |BN_div|, |BN_mod|, and |BN_nnmod| insensitive to |BN_FLG_CONSTTIME|. This improves the effectiveness of testing by reducing the number of branches that are likely to go untested or less tested. There is no performance-sensitive code that uses BN_div but doesn't already use BN_FLG_CONSTTIME except RSA signature verification and EC_GROUP creation. RSA signature verification, ECDH, and ECDSA performance aren't significantly different with this change. Change-Id: Ie34c4ce925b939150529400cc60e1f414c7676cd Reviewed-on: https://boringssl-review.googlesource.com/9105 Reviewed-by: David Benjamin <davidben@google.com> Commit-Queue: David Benjamin <davidben@google.com> |
||
---|---|---|
.. | ||
blinding.c | ||
CMakeLists.txt | ||
internal.h | ||
padding.c | ||
rsa_asn1.c | ||
rsa_impl.c | ||
rsa_test.cc | ||
rsa.c |