Proxmox-Port/libtpms
1
0
Fork 0
mirror of https://github.com/stefanberger/libtpms synced 2026-08-19 02:58:54 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

tpm2: Do not set RSA_FLAG_NO_BLINDING on RSA keys anymore

Browse Source 
Do not set the RSA_FLAG_NO_BLINDING on RSA keys anymore. The BoringSSL
documentation states the following:

"RSA_FLAG_NO_BLINDING disables blinding of private operations, which is
a dangerous thing to do. It is deprecated and should not be used. It will
be ignored whenever possible."

So, follow this documentation. OpenSSL does not seem to say much about it.

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
This commit is contained in:
Stefan Berger 2022-06-03 21:51:57 -04:00 committed by Stefan Berger
parent b1b2cf5e15
commit a4b8797259
1 changed files with 0 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/tpm2/crypto/openssl/Helpers.c
View File

@ -439,8 +439,6 @@ InitOpenSSLRSAPublicKey(OBJECT *key, // IN
EVP_PKEY_assign_RSA(*pkey, rsakey) == 0)
ERROR_RETURN(TPM_RC_FAILURE)
RSA_set_flags(rsakey, RSA_FLAG_NO_BLINDING);
retVal = TPM_RC_SUCCESS;
Exit: