Hi Stephan, > Am Mittwoch, 6. April 2016, 16:37:56 schrieb Tudor Ambarus: > > > +static size_t scatterwalk_skip_zeros(struct scatter_walk *walk, size_t > > nbytes) +{ > > Do you really want to keep that function after Herbert mentioned we should > leave the zeros for the RSA operation? Or asked differently, why is the > skipping of the zeroes not introducing a side channel? The skipping of the zeros does not introduce a side channel because it is done only for the output data, after the computation completes. Thanks, ta -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html