diff options
| author | Bodo Möller <bodo@openssl.org> | 2005-05-16 01:43:31 +0000 |
|---|---|---|
| committer | Bodo Möller <bodo@openssl.org> | 2005-05-16 01:43:31 +0000 |
| commit | 46a643763de6d8e39ecf6f76fa79b4d04885aa59 (patch) | |
| tree | e1f3cfc98bddba797b5300977dbf3223f008fc4a /crypto/dsa/dsatest.c | |
| parent | 92c44685724c0d993ea8920577680f3c0a1d79c8 (diff) | |
| download | openssl-46a643763de6d8e39ecf6f76fa79b4d04885aa59.tar.gz | |
Implement fixed-window exponentiation to mitigate hyper-threading
timing attacks.
BN_FLG_EXP_CONSTTIME requests this algorithm, and this done by default for
RSA/DSA/DH private key computations unless
RSA_FLAG_NO_EXP_CONSTTIME/DSA_FLAG_NO_EXP_CONSTTIME/
DH_FLAG_NO_EXP_CONSTTIME is set.
Submitted by: Matthew D Wood
Reviewed by: Bodo Moeller
Diffstat (limited to 'crypto/dsa/dsatest.c')
| -rw-r--r-- | crypto/dsa/dsatest.c | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/crypto/dsa/dsatest.c b/crypto/dsa/dsatest.c index ccc456eab7..66ff417398 100644 --- a/crypto/dsa/dsatest.c +++ b/crypto/dsa/dsatest.c @@ -204,10 +204,19 @@ int main(int argc, char **argv) BIO_printf(bio_err,"g value is wrong\n"); goto end; } + + dsa->flags |= DSA_FLAG_NO_EXP_CONSTTIME; DSA_generate_key(dsa); DSA_sign(0, str1, 20, sig, &siglen, dsa); if (DSA_verify(0, str1, 20, sig, siglen, dsa) == 1) ret=1; + + dsa->flags &= ~DSA_FLAG_NO_EXP_CONSTTIME; + DSA_generate_key(dsa); + DSA_sign(0, str1, 20, sig, &siglen, dsa); + if (DSA_verify(0, str1, 20, sig, siglen, dsa) == 1) + ret=1; + end: if (!ret) ERR_print_errors(bio_err); |