]> git.ipfire.org Git - thirdparty/openssl.git/blame - doc/man3/RSA_blinding_on.pod
man: clarify the 'random number generator must be seeded' requirement
[thirdparty/openssl.git] / doc / man3 / RSA_blinding_on.pod
CommitLineData
2186cd8e
UM
1=pod
2
3=head1 NAME
4
4d524e10 5RSA_blinding_on, RSA_blinding_off - protect the RSA operation from timing attacks
2186cd8e
UM
6
7=head1 SYNOPSIS
8
9 #include <openssl/rsa.h>
10
11 int RSA_blinding_on(RSA *rsa, BN_CTX *ctx);
12
13 void RSA_blinding_off(RSA *rsa);
14
15=head1 DESCRIPTION
16
6a3fff5e 17RSA is vulnerable to timing attacks. In a setup where attackers can
2186cd8e
UM
18measure the time of RSA decryption or signature operations, blinding
19must be used to protect the RSA operation from that attack.
20
21RSA_blinding_on() turns blinding on for key B<rsa> and generates a
22random blinding factor. B<ctx> is B<NULL> or a pre-allocated and
262c0088 23initialized B<BN_CTX>.
2186cd8e
UM
24
25RSA_blinding_off() turns blinding off and frees the memory used for
26the blinding factor.
27
28=head1 RETURN VALUES
29
30RSA_blinding_on() returns 1 on success, and 0 if an error occurred.
31
32RSA_blinding_off() returns no value.
33
e2f92610
RS
34=head1 COPYRIGHT
35
36Copyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved.
37
4746f25a 38Licensed under the Apache License 2.0 (the "License"). You may not use
e2f92610
RS
39this file except in compliance with the License. You can obtain a copy
40in the file LICENSE in the source distribution or at
41L<https://www.openssl.org/source/license.html>.
42
43=cut