Nikos Mavrogiannopoulos <[email protected]> writes: > On Fri, 2016-08-05 at 09:56 +0200, Niels Möller wrote: >> Nikos Mavrogiannopoulos <[email protected]> writes: >> >> > >> > That's correct, but it still bugs me as a cost that gets added into >> > busy servers. >> >> But only once per hostkey and server restart, right? > > As it is now I do not set the size explicitly and call the prepare > function on every RSA operation (sign/decrypt).
Hmm. I'd imagine that you would create and initialize nettle's struct rsa_public_key and rsa_private_key at the time you read the key files on disk, and then that's also the right time to call _prepare. Is tharre any reason it's hard to organize that way? > That's correct, but I think that's the responsibility of the caller to > supply the corresponding keys. But I think we'de want to ensure that nettle doesn't crash; an application should be able to read key files controlled by an attacker and use them with nettle without crashing (bogus outputs are of course expected). And I feel a little uneasy about ensuring that nettle's rsa functions work without crashing if the size field is too large or too small; that violates assumptions I made when writing the code quite some time ago... It might be not too difficult, but I'd feel better about having the _prepare functions be responsible for setting the size correctly. Regards, /Niels -- Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26. Internet email is subject to wholesale government surveillance. _______________________________________________ nettle-bugs mailing list [email protected] http://lists.lysator.liu.se/mailman/listinfo/nettle-bugs
