The branch master has been updated
via 3a070e255f412dcc8cb4b6d7ebcdd2c4ab0927b1 (commit)
from ecd4b8fe852612bb902b8dee7ca09648fa730253 (commit)
- Log -----------------------------------------------------------------
commit 3a070e255f412dcc8cb4b6d7ebcdd2c4ab0927b1
Author: Matt Caswell <[email protected]>
Date: Mon Apr 30 15:05:45 2018 +0100
Clarify BN_mod_exp docs
Specifically this is not supported with an even modulus and
BN_FLG_CONSTTIME.
Fixes #5082
Reviewed-by: Rich Salz <[email protected]>
(Merged from https://github.com/openssl/openssl/pull/6137)
-----------------------------------------------------------------------
Summary of changes:
doc/man3/BN_add.pod | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/doc/man3/BN_add.pod b/doc/man3/BN_add.pod
index 98f2970..88a0117 100644
--- a/doc/man3/BN_add.pod
+++ b/doc/man3/BN_add.pod
@@ -92,7 +92,9 @@ BN_exp() raises I<a> to the I<p>-th power and places the
result in I<r>
BN_mul().
BN_mod_exp() computes I<a> to the I<p>-th power modulo I<m> (C<r=a^p %
-m>). This function uses less time and space than BN_exp().
+m>). This function uses less time and space than BN_exp(). Do not call this
+function when B<m> is even and any of the parameters have the
+B<BN_FLG_CONSTTIME> flag set.
BN_gcd() computes the greatest common divisor of I<a> and I<b> and
places the result in I<r>. I<r> may be the same B<BIGNUM> as I<a> or
_____
openssl-commits mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-commits
