mirror of https://github.com/openssl/openssl.git
237bc6c997
It is not necessary to remove leading zeros here because RSA_padding_check_PKCS1_OAEP_mgf1 appends them again. As this was not done in constant time, this might have leaked timing information. Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Andy Polyakov <appro@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3313) |
||
|---|---|---|
| .. | ||
| build.info | ||
| rsa_ameth.c | ||
| rsa_asn1.c | ||
| rsa_chk.c | ||
| rsa_crpt.c | ||
| rsa_depr.c | ||
| rsa_err.c | ||
| rsa_gen.c | ||
| rsa_lib.c | ||
| rsa_locl.h | ||
| rsa_meth.c | ||
| rsa_none.c | ||
| rsa_oaep.c | ||
| rsa_ossl.c | ||
| rsa_pk1.c | ||
| rsa_pmeth.c | ||
| rsa_prn.c | ||
| rsa_pss.c | ||
| rsa_saos.c | ||
| rsa_sign.c | ||
| rsa_ssl.c | ||
| rsa_x931.c | ||
| rsa_x931g.c | ||