From: Niels Möller <nisse@lysator.liu.se>
Date: Thu, 6 Mar 2025 19:11:37 +0000 (+0100)
Subject: Delete obsolete and deprecated _rsa_blind and _rsa_unblind functions.
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=096192a5edc40cb2f7c1284319c4cdc1898472b9;p=thirdparty%2Fnettle.git

Delete obsolete and deprecated _rsa_blind and _rsa_unblind functions.
---

diff --git a/ChangeLog b/ChangeLog
index 0403e22f..ec690675 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,8 @@
+2025-03-06  Niels Möller  <nisse@lysator.liu.se>
+
+	* rsa-blind.c (_rsa_blind, _rsa_unblind): Delete file, delete
+	obsolete functions (current RSA blinding functions are not exported).
+
 2025-03-05  Niels Möller  <nisse@lysator.liu.se>
 
 	Delete old AES interface.
diff --git a/Makefile.in b/Makefile.in
index 3b8b0dbb..de931445 100644
--- a/Makefile.in
+++ b/Makefile.in
@@ -189,7 +189,7 @@ hogweed_SOURCES = sexp.c sexp-format.c \
 		  rsa-encrypt.c rsa-decrypt.c \
 		  rsa-oaep-encrypt.c rsa-oaep-decrypt.c \
 		  rsa-sec-decrypt.c rsa-decrypt-tr.c \
-		  rsa-keygen.c rsa-blind.c \
+		  rsa-keygen.c \
 		  rsa2sexp.c sexp2rsa.c \
 		  dsa.c dsa-compat.c dsa-compat-keygen.c dsa-gen-params.c \
 		  dsa-sign.c dsa-verify.c dsa-keygen.c dsa-hash.c \
diff --git a/rsa-blind.c b/rsa-blind.c
deleted file mode 100644
index 0deb9443..00000000
--- a/rsa-blind.c
+++ /dev/null
@@ -1,78 +0,0 @@
-/* rsa-blind.c
-
-   RSA blinding. Used for resistance to timing-attacks.
-
-   Copyright (C) 2001, 2012 Niels Möller, Nikos Mavrogiannopoulos
-
-   This file is part of GNU Nettle.
-
-   GNU Nettle is free software: you can redistribute it and/or
-   modify it under the terms of either:
-
-     * the GNU Lesser General Public License as published by the Free
-       Software Foundation; either version 3 of the License, or (at your
-       option) any later version.
-
-   or
-
-     * the GNU General Public License as published by the Free
-       Software Foundation; either version 2 of the License, or (at your
-       option) any later version.
-
-   or both in parallel, as here.
-
-   GNU Nettle is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-   General Public License for more details.
-
-   You should have received copies of the GNU General Public License and
-   the GNU Lesser General Public License along with this program.  If
-   not, see http://www.gnu.org/licenses/.
-*/
-
-#if HAVE_CONFIG_H
-# include "config.h"
-#endif
-
-#include "rsa.h"
-#include "rsa-internal.h"
-
-#include "bignum.h"
-
-/* Blinds the c, by computing c *= r^e (mod n), for a random r. Also
-   returns the inverse (ri), for use by rsa_unblind. */
-void
-_rsa_blind (const struct rsa_public_key *pub,
-	    void *random_ctx, nettle_random_func *random,
-	    mpz_t c, mpz_t ri)
-{
-  mpz_t r;
-
-  mpz_init(r);
-
-  /* c = c*(r^e)
-   * ri = r^(-1)
-   */
-  do 
-    {
-      nettle_mpz_random(r, random_ctx, random, pub->n);
-      /* invert r */
-    }
-  while (!mpz_invert (ri, r, pub->n));
-
-  /* c = c*(r^e) mod n */
-  mpz_powm_sec(r, r, pub->e, pub->n);
-  mpz_mul(c, c, r);
-  mpz_fdiv_r(c, c, pub->n);
-
-  mpz_clear(r);
-}
-
-/* c *= ri mod n */
-void
-_rsa_unblind (const struct rsa_public_key *pub, mpz_t c, const mpz_t ri)
-{
-  mpz_mul(c, c, ri);
-  mpz_fdiv_r(c, c, pub->n);
-}
diff --git a/rsa-internal.h b/rsa-internal.h
index fd54b9d5..1a3d8a40 100644
--- a/rsa-internal.h
+++ b/rsa-internal.h
@@ -40,8 +40,6 @@
 #define _rsa_verify _nettle_rsa_verify
 #define _rsa_verify_recover _nettle_rsa_verify_recover
 #define _rsa_check_size _nettle_rsa_check_size
-#define _rsa_blind _nettle_rsa_blind
-#define _rsa_unblind _nettle_rsa_unblind
 #define _rsa_sec_compute_root_itch _nettle_rsa_sec_compute_root_itch
 #define _rsa_sec_compute_root _nettle_rsa_sec_compute_root
 #define _rsa_sec_compute_root_tr _nettle_rsa_sec_compute_root_tr
@@ -62,16 +60,6 @@ _rsa_verify_recover(const struct rsa_public_key *key,
 size_t
 _rsa_check_size(mpz_t n);
 
-/* _rsa_blind and _rsa_unblind are deprecated, unused in the library,
-   and will likely be removed with the next ABI break. */
-void
-_rsa_blind (const struct rsa_public_key *pub,
-	    void *random_ctx, nettle_random_func *random,
-	    mpz_t c, mpz_t ri) _NETTLE_ATTRIBUTE_DEPRECATED;
-void
-_rsa_unblind (const struct rsa_public_key *pub, mpz_t c, const mpz_t ri)
-  _NETTLE_ATTRIBUTE_DEPRECATED;
-
 /* side-channel silent root computation */
 mp_size_t
 _rsa_sec_compute_root_itch(const struct rsa_private_key *key);