Skip to main content
Revision 0f04b004acb27a705578d5b2cede0a84ba9af0dd authored by Emilia Kasper on 28 August 2014, 17:43:49 UTC, committed by Emilia Kasper on 24 September 2014, 12:17:41 UTC
RT3066: rewrite RSA padding checks to be slightly more constant time.
Also tweak s3_cbc.c to use new constant-time methods.
Also fix memory leaks from internal errors in RSA_padding_check_PKCS1_OAEP_mgf1

This patch is based on the original RT submission by Adam Langley <agl@chromium.org>,
as well as code from BoringSSL and OpenSSL.

Reviewed-by: Kurt Roeckx <kurt@openssl.org>

Conflicts:
	crypto/rsa/rsa_oaep.c
1 parent 81e3a60
Raw File
ACKNOWLEDGMENTS
The OpenSSL project depends on volunteer efforts and financial support from
the end user community. That support comes in the form of donations and paid
sponsorships, software support contracts, paid consulting services
and commissioned software development.

Since all these activities support the continued development and improvement
of OpenSSL we consider all these clients and customers as sponsors of the
OpenSSL project.

We would like to identify and thank the following such sponsors for their past
or current significant support of the OpenSSL project:

Major support:

	Qualys		http://www.qualys.com/

Very significant support:

	OpenGear:	http://www.opengear.com/

Significant support:

	PSW Group:	http://www.psw.net/
	Acano Ltd.	http://acano.com/

Please note that we ask permission to identify sponsors and that some sponsors
we consider eligible for inclusion here have requested to remain anonymous.

Additional sponsorship or financial support is always welcome: for more
information please contact the OpenSSL Software Foundation.
back to top