mirror of
https://github.com/yuzu-emu/mbedtls.git
synced 2025-02-03 08:50:58 +00:00
Improve documentation on the use of blinding in RSA
This commit is contained in:
parent
e856e84de3
commit
26f1f6061d
|
@ -518,6 +518,18 @@ int mbedtls_rsa_public( mbedtls_rsa_context *ctx,
|
||||||
*
|
*
|
||||||
* \note The input and output buffers must be large
|
* \note The input and output buffers must be large
|
||||||
* enough. For example, 128 Bytes if RSA-1024 is used.
|
* enough. For example, 128 Bytes if RSA-1024 is used.
|
||||||
|
*
|
||||||
|
* \note Blinding is used if and only if a PRNG is provided.
|
||||||
|
*
|
||||||
|
* \note If blinding is used, both the base of exponentation
|
||||||
|
* and the exponent are blinded, providing protection
|
||||||
|
* against some side-channel attacks.
|
||||||
|
*
|
||||||
|
* \warning It is deprecated and a security risk to not provide
|
||||||
|
* a PRNG here and thereby prevent the use of blinding.
|
||||||
|
* Future versions of the library may enforce the presence
|
||||||
|
* of a PRNG.
|
||||||
|
*
|
||||||
*/
|
*/
|
||||||
int mbedtls_rsa_private( mbedtls_rsa_context *ctx,
|
int mbedtls_rsa_private( mbedtls_rsa_context *ctx,
|
||||||
int (*f_rng)(void *, unsigned char *, size_t),
|
int (*f_rng)(void *, unsigned char *, size_t),
|
||||||
|
|
Loading…
Reference in a new issue