On Wed, Feb 24, 2016 at 12:27:03PM +0100, Stephan Mueller wrote: > > Currently RSA does not implement anything and is even susceptible to timing > attacks if I see that right as the leading zeros are stripped. In addition to We should certainly fix this by not stripping the zeroes. > the leading zeroes problem, blinding comes to mind. If we do blinding, what > type of blinding is sufficient for a fallback (base, exponent, modulus)? It's not just a fallback. If we ever export this to user-space this may become a primary implementation. Cheers, -- Email: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
