diff options
| author | Jack Lloyd <[email protected]> | 2016-11-02 15:05:46 -0400 |
|---|---|---|
| committer | Jack Lloyd <[email protected]> | 2016-11-03 11:57:10 -0400 |
| commit | 8d50c82b43b34b70d19b0faaeab6b37f2eae066c (patch) | |
| tree | 9cb7478fb7c37c66e140bc09ca77bf0ede07cc76 /src/build-data/buildh.in | |
| parent | b1021ca76bb3c47b1b520421ccece38d772e5907 (diff) | |
Remove automatic self-testing of public and private keys
Rarely expected and often causes performance problems, especially for private keys.
Instead applications should call check_key explicitly to validate keys when
necessary.
Note this removal doesn't apply to tests like ECDH on-the-curve tests, where a check
on the public key is required for security of our own key.
Updates most APIs to remove RNG calls, where they are no longer required. Exception
is PKCS8 interface, pending further work there (see GH #685) it just ignores the RNG
argument now.
Diffstat (limited to 'src/build-data/buildh.in')
| -rw-r--r-- | src/build-data/buildh.in | 5 |
1 files changed, 0 insertions, 5 deletions
diff --git a/src/build-data/buildh.in b/src/build-data/buildh.in index 41685cfc4..4a2a46452 100644 --- a/src/build-data/buildh.in +++ b/src/build-data/buildh.in @@ -94,11 +94,6 @@ */ #define BOTAN_BLINDING_REINIT_INTERVAL 32 -/* PK key consistency checking toggles */ -#define BOTAN_PUBLIC_KEY_STRONG_CHECKS_ON_LOAD 1 -#define BOTAN_PRIVATE_KEY_STRONG_CHECKS_ON_LOAD 0 -#define BOTAN_PRIVATE_KEY_STRONG_CHECKS_ON_GENERATE 1 - /* * Userspace RNGs like HMAC_DRBG will reseed after a specified number * of outputs are generated. Set to zero to disable automatic reseeding. |