yggdrasil/rsa
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

README.md: add notes about timing variability (#373)

Browse Source 
Notes that the modpow implementation is not constant-time, but timing
variability is masked using random blinding.
This commit is contained in:
Tony Arcieri 2023-10-16 11:11:37 -06:00 committed by GitHub
parent 3a2906675a
commit 49b6c7e6ba
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
README.md
View File

@ -72,6 +72,10 @@ only one minor finding which has since been addressed.
See the [open security issues] on our issue tracker for other known problems. See the [open security issues] on our issue tracker for other known problems.
Notably the implementation of [modular exponentiation is not constant time],
but timing variability is masked using random blinding, a commonly used
technique.
## Minimum Supported Rust Version (MSRV) ## Minimum Supported Rust Version (MSRV)
All crates in this repository support Rust 1.65 or higher. All crates in this repository support Rust 1.65 or higher.
@ -112,3 +116,4 @@ dual licensed as above, without any additional terms or conditions.
[RustCrypto]: https://github.com/RustCrypto/ [RustCrypto]: https://github.com/RustCrypto/
[audit]: https://www.opentech.fund/results/security-safety-audits/deltachat/ [audit]: https://www.opentech.fund/results/security-safety-audits/deltachat/
[open security issues]: https://github.com/RustCrypto/RSA/issues?q=is%3Aissue+is%3Aopen+label%3Asecurity [open security issues]: https://github.com/RustCrypto/RSA/issues?q=is%3Aissue+is%3Aopen+label%3Asecurity
[modular exponentiation is not constant time]: https://github.com/RustCrypto/RSA/issues/19