diff options
| author |   bcook <bcook@openbsd.org> | 2016-06-21 04:16:53 +0000 |
|---|---|---|
| committer | bcook <bcook@openbsd.org> | 2016-06-21 04:16:53 +0000 |
| commit | 55cda256cf237a408a609da09647ec2a4ee0a5f3 (patch) | |
| tree | fb74b8a592d9960ee360427265e0041d97735d2a /lib/libssl/src/crypto/dsa/dsa.h | |
| parent | Fix a bug loading the default certificate path locations. (diff) | |
| download | wireguard-openbsd-55cda256cf237a408a609da09647ec2a4ee0a5f3.tar.xz wireguard-openbsd-55cda256cf237a408a609da09647ec2a4ee0a5f3.zip | |
Disable DSA_FLAG_NO_EXP_CONSTTIME, always enable constant-time behavior.
Improved patch from Cesar Pereida. See
https://github.com/libressl-portable/openbsd/pull/61 for more details.
ok beck@
Diffstat (limited to 'lib/libssl/src/crypto/dsa/dsa.h')
| -rw-r--r-- | lib/libssl/src/crypto/dsa/dsa.h | 10 |
1 files changed, 3 insertions, 7 deletions
diff --git a/lib/libssl/src/crypto/dsa/dsa.h b/lib/libssl/src/crypto/dsa/dsa.h index 7fbaa294648..f7f81cfa948 100644 --- a/lib/libssl/src/crypto/dsa/dsa.h +++ b/lib/libssl/src/crypto/dsa/dsa.h @@ -1,4 +1,4 @@ -/* $OpenBSD: dsa.h,v 1.19 2015/10/13 12:31:06 jsing Exp $ */ +/* $OpenBSD: dsa.h,v 1.20 2016/06/21 04:16:53 bcook Exp $ */ /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) * All rights reserved. * @@ -89,12 +89,8 @@ #endif #define DSA_FLAG_CACHE_MONT_P 0x01 -#define DSA_FLAG_NO_EXP_CONSTTIME 0x02 /* new with 0.9.7h; the built-in DSA - * implementation now uses constant time - * modular exponentiation for secret exponents - * by default. This flag causes the - * faster variable sliding window method to - * be used for all exponents. +#define DSA_FLAG_NO_EXP_CONSTTIME 0x00 /* Does nothing. Previously this switched off + * constant time behaviour. */ /* If this flag is set the DSA method is FIPS compliant and can be used |