You've already forked opencryptoki
mirror of
https://github.com/opencryptoki/opencryptoki.git
synced 2026-10-28 18:37:25 +03:00
365a200827
Use OpenSSL's constant time implementation of the RSA-OAEP padding check for the RSA-OAEP padding mode when decrypting with the private key. The decode_eme_oaep() function is now constant time, but it still returns an error (although in a constant time manner) in case the padding check failed. It is the PKCS#11 application's responsibility to further handle such an error situation in a constant-time manner to not be vulnerable to timing attacks. Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>
66 lines
3.2 KiB
Plaintext
66 lines
3.2 KiB
Plaintext
Base openCryptoki Code and IBM submissions
|
|
|
|
(C) COPYRIGHT International Business Machines Corp. 2001, 2023
|
|
|
|
|
|
|
|
For code originating from OpenSSL:
|
|
|
|
* - usr/lib/ica_s390_stdll/rsa_sup_mul.c: Copied from OpenSSL from
|
|
* crypto/bn/rsa_sup_mul.c and modified to fit to the OpenCrptoki environment.
|
|
* See comment in usr/lib/ica_s390_stdll/rsa_sup_mul.c for a list of changes.
|
|
* Note that in OpenSSL the file crypto/bn/rsa_sup_mul.c does no longer
|
|
* exist, it was removed with commit https://github.com/openssl/openssl/commit/4209ce68d8fe8b1506494efa03d378d05baf9ff8
|
|
* - usr/lib/common/constant_time.h: Copied unchanged from OpenSSL from
|
|
include/internal/constant_time.h
|
|
* - The implementation of function rsa_parse_block_type_2() in
|
|
* usr/lib/common/mech_rsa.c is copied from OpenSSL's function
|
|
* ossl_rsa_padding_check_PKCS1_type_2() in crypto/rsa/rsa_pk1.c
|
|
* and is slightly modified to fit to the OpenCryptoki environment.
|
|
* See comment in function rsa_parse_block_type_2() for a list of changes.
|
|
* - The implementation of function decode_eme_oaep() in
|
|
* usr/lib/common/mech_rsa.c is copied from OpenSSL's function
|
|
* RSA_padding_check_PKCS1_OAEP_mgf1() in crypto/rsa/rsa_oaep.c and is
|
|
* slightly modified to fit to the OpenCryptoki environment. See comment in
|
|
* function decode_eme_oaep() for a list of changes.
|
|
*
|
|
* Copyright 1999-2023 The OpenSSL Project Authors. All Rights Reserved.
|
|
*
|
|
* The OpenSSL code is licensed under the Apache License 2.0 (the "License").
|
|
* You can obtain a copy in the file LICENSE in the OpenSSL source distribution
|
|
* or at https://www.openssl.org/source/license.html
|
|
|
|
|
|
|
|
For Code originating from AEP Systems Ltd.
|
|
|
|
* Copyright (c) 1999-2002 AEP Systems Ltd.
|
|
* Bray Business Park, Southern Cross Route, Bray, Co. Wicklow, Ireland.
|
|
* All Rights Reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions are met:
|
|
*
|
|
* 1. Redistributions of source code must retain the above copyright notice,
|
|
* this list of conditions and the following disclaimer.
|
|
*
|
|
* 2. Redistributions in binary form must reproduce the above copyright notice,
|
|
* this list of conditions and the following disclaimer in the documentation
|
|
* and/or other materials provided with the distribution.
|
|
*
|
|
* 3. Neither the name of AEP Systems Ltd. nor the names of its contributors
|
|
* may be used to endorse or promote products derived from this software
|
|
* without specific prior written permission.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS ``AS IS''
|
|
* AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
* ARE DISCLAIMED. IN NO EVENT SHALL CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
|
|
* INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
|
|
* (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
|
|
* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
|
|
* ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
|
|
* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
|
|
* THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
|