Mercurial > dropbear
diff sysoptions.h @ 850:7507b174bba0 ecc
- Make curve25519 work after fixing a typo, interoperates with OpenSSH
- comment on ecc binary size effects
author | Matt Johnston <matt@ucc.asn.au> |
---|---|
date | Sat, 09 Nov 2013 00:02:26 +0800 |
parents | f4bb964c8678 |
children | 04ede40a529a |
line wrap: on
line diff
--- a/sysoptions.h Fri Nov 08 23:32:13 2013 +0800 +++ b/sysoptions.h Sat Nov 09 00:02:26 2013 +0800 @@ -104,8 +104,13 @@ #define DROPBEAR_LTC_PRNG #endif +/* RSA can be vulnerable to timing attacks which use the time required for + * signing to guess the private key. Blinding avoids this attack, though makes + * signing operations slightly slower. */ +#define RSA_BLINDING + /* hashes which will be linked and registered */ -#if defined(DROPBEAR_SHA2_256_HMAC) || defined(DROPBEAR_ECC_256) +#if defined(DROPBEAR_SHA2_256_HMAC) || defined(DROPBEAR_ECC_256) || defined(DROPBEAR_CURVE25519) #define DROPBEAR_SHA256 #endif #if defined(DROPBEAR_ECC_384)