wireguard-openbsd/lib/libcrypto/man/BN_set_flags.3, branch jd/queueboostsWireGuard implementation for the OpenBSD kernelhttps://git.zx2c4.com/wireguard-openbsd/atom/lib/libcrypto/man/BN_set_flags.3?h=jd%2Fqueueboosts2018-04-29T15:58:21ZIn view of the recent BN_FLG_CONSTTIME vulnerabilities in OpenSSL,2018-04-29T15:58:21Zschwarzeschwarze@openbsd.org2018-04-29T15:58:21Zurn:sha1:2295afa0a1e76310f4e29d8c25d4da7f98ec5bc5
carefully document constant time vs. non-constant time operation
of BN_div(3), BN_mod_exp(3), and BN_mod_inverse(3).
Until the work that is required on the ill-designed BN_exp(3) and
BN_gcd(3) interfaces can be undertaken, also document the imperfections
in their behaviour, for now. Finally, mention BN_mod_exp(3) behaviour
for even moduli.
Delete the vague statement about some functions automatically
setting BN_FLG_CONSTTIME. It created a false sense of security.
Do not rely on it: not all relevant functions do that.
Topic brought up by beck@, significant feedback and OK jsing@.
crypto HISTORY up to SSLeay 0.9.1; researched from OpenSSL git2018-03-21T09:03:49Zschwarzeschwarze@openbsd.org2018-03-21T09:03:49Zurn:sha1:b455b8f670576c8bd20635a55b1de696365812cdDocument BN_set_flags(3) and BN_get_flags(3).2017-01-30T01:29:31Zschwarzeschwarze@openbsd.org2017-01-30T01:29:31Zurn:sha1:48e9223cf2f78883652138b36245e80f517d16ec
jsing@ confirmed that these macros are public and worth documenting.