diff sysoptions.h @ 850:7507b174bba0 ecc

- Make curve25519 work after fixing a typo, interoperates with OpenSSH - comment on ecc binary size effects
author Matt Johnston <matt@ucc.asn.au>
date Sat, 09 Nov 2013 00:02:26 +0800
parents f4bb964c8678
children 04ede40a529a
line wrap: on
line diff
--- a/sysoptions.h	Fri Nov 08 23:32:13 2013 +0800
+++ b/sysoptions.h	Sat Nov 09 00:02:26 2013 +0800
@@ -104,8 +104,13 @@
 #define DROPBEAR_LTC_PRNG
 #endif
 
+/* RSA can be vulnerable to timing attacks which use the time required for
+ * signing to guess the private key. Blinding avoids this attack, though makes
+ * signing operations slightly slower. */
+#define RSA_BLINDING
+
 /* hashes which will be linked and registered */
-#if defined(DROPBEAR_SHA2_256_HMAC) || defined(DROPBEAR_ECC_256)
+#if defined(DROPBEAR_SHA2_256_HMAC) || defined(DROPBEAR_ECC_256) || defined(DROPBEAR_CURVE25519)
 #define DROPBEAR_SHA256
 #endif
 #if defined(DROPBEAR_ECC_384)