Emilia Kasper 1e3f62a382 RSA_padding_check_PKCS1_type_2 is not constant time.
This is an inherent weakness of the padding mode. We can't make the
implementation constant time (see the comments in rsa_pk1.c), so add a
warning to the docs.

Reviewed-by: Rich Salz <rsalz@openssl.org>
2017-07-18 11:16:39 +02:00
..
2017-07-03 10:40:33 -04:00
2017-04-25 11:13:39 +01:00
2017-07-03 10:40:33 -04:00
2017-03-12 08:27:30 -04:00
2017-03-20 16:25:22 -04:00
2017-03-11 08:56:44 -05:00
2017-03-11 08:56:44 -05:00
2017-03-11 08:56:44 -05:00
2017-04-07 13:48:19 -04:00
2017-07-05 12:53:28 -05:00
2017-03-11 08:56:44 -05:00
2017-03-11 08:56:44 -05:00
2017-07-03 19:26:56 -04:00
2017-03-11 08:56:44 -05:00
2017-03-11 08:56:44 -05:00
2017-03-11 08:56:44 -05:00
2017-07-03 10:40:33 -04:00
2017-03-11 08:56:44 -05:00
2017-06-11 16:21:33 -04:00
2016-11-11 13:06:43 +01:00
2017-03-11 08:56:44 -05:00
2017-07-03 10:40:33 -04:00
2017-06-29 00:38:26 +02:00
2017-07-03 10:40:33 -04:00
2017-05-08 21:17:28 +02:00
2017-07-03 10:40:33 -04:00
2017-06-11 16:21:33 -04:00
2017-07-07 23:53:54 -04:00
2017-07-07 23:53:54 -04:00
2017-07-12 11:09:39 -04:00
2017-03-11 08:56:44 -05:00
2017-07-03 10:40:33 -04:00
2017-03-29 07:18:57 +02:00
2017-03-30 14:18:11 +02:00
2017-03-29 07:14:29 +02:00
2017-07-03 10:40:33 -04:00
2017-06-11 16:21:33 -04:00
2017-04-25 22:12:35 +01:00
2017-07-03 10:40:33 -04:00