diff options
| author | Jack Lloyd <[email protected]> | 2018-06-20 15:58:35 -0400 |
|---|---|---|
| committer | Jack Lloyd <[email protected]> | 2018-06-20 15:58:35 -0400 |
| commit | 0ca8c2005661fd7a4041ac7a800a9e326a576dfe (patch) | |
| tree | 66e283efcffaf8712ed30cd1cc0ef5dcc103e17a /src/build-data | |
| parent | 1d0eb1afd390b3b7e2719f6d80e9964a618a26b8 (diff) | |
Remove build time toggle for ECC coordinate masking
This is not a decision we should leave to end users.
And always use a random mask equal in size to the underlying field.
It was never quite clear if 80 bits was sufficient or not. But
taking a random field element is clearly the best possible situation,
and has very little additional cost.
Diffstat (limited to 'src/build-data')
| -rw-r--r-- | src/build-data/buildh.in | 7 |
1 files changed, 0 insertions, 7 deletions
diff --git a/src/build-data/buildh.in b/src/build-data/buildh.in index ef58078b5..f34cf26a3 100644 --- a/src/build-data/buildh.in +++ b/src/build-data/buildh.in @@ -136,13 +136,6 @@ #define BOTAN_USE_VOLATILE_MEMSET_FOR_ZERO 1 /* -* Set number of bits used to generate mask for blinding the -* representation of an ECC point. Set to zero to disable this -* side-channel countermeasure. -*/ -#define BOTAN_POINTGFP_RANDOMIZE_BLINDING_BITS 80 - -/* * Normally blinding is performed by choosing a random starting point (plus * its inverse, of a form appropriate to the algorithm being blinded), and * then choosing new blinding operands by successive squaring of both |