diff options
| author | Bodo Möller <bodo@openssl.org> | 2000-09-19 23:25:00 +0000 |
|---|---|---|
| committer | Bodo Möller <bodo@openssl.org> | 2000-09-19 23:25:00 +0000 |
| commit | fe03519704d5f533722e061009ca079e7217cfd2 (patch) | |
| tree | f5b344f73719a46269834d13a2c06e2c544563c8 /CHANGES | |
| parent | b004872c5959f8921571dd3d6164672faee13f97 (diff) | |
| download | openssl-fe03519704d5f533722e061009ca079e7217cfd2.tar.gz | |
Totally remove the supposedly 'faster' variant in
BN_mod_mul_montgomery, which calls bn_sqr_recursive
without much preparation.
bn_sqr_recursive requires the length of its argument to be
a power of 2, which is not always the case here.
There's no reason for not using BN_sqr -- if a simpler
approach to squaring made sense, then why not change
BN_sqr? (Using BN_sqr should also speed up DH where g is chosen
such that it becomes small [e.g., 2] when converted
to Montgomery representation.)
Case closed :-)
Diffstat (limited to 'CHANGES')
| -rw-r--r-- | CHANGES | 2 |
1 files changed, 1 insertions, 1 deletions
@@ -4,7 +4,7 @@ Changes between 0.9.5a and 0.9.6 [xx XXX 2000] - *) Disable 'optimized' squaring variant in BN_mod_mul_montgomery, + *) Remove 'optimized' squaring variant in BN_mod_mul_montgomery, it can return incorrect results. (Note: The buggy variant was not enabled in OpenSSL 0.9.5a, but it was in 0.9.6-beta[12].) |