Jack Lloyd b10fd065be Parse RSA parameters DP, DQ and QP from PKCS1 private keys ...

Otherwise these values are recomputed in mbedtls_rsa_deduce_crt, which
currently suffers from side channel issues in the computation of QP
(see https://eprint.iacr.org/2020/055). By loading the pre-computed
values not only is the side channel avoided, but runtime overhead of
loading RSA keys is reduced.

Discussion in https://github.com/ARMmbed/mbed-crypto/issues/347

Backport of https://github.com/ARMmbed/mbed-crypto/pull/352

2020-01-29 13:09:55 -05:00

83 KiB

Raw Blame History

View Raw