diff options
| author | David Benjamin <davidben@davidben.net> | 2018-05-15 18:12:51 -0400 |
|---|---|---|
| committer | Alex Gaynor <alex.gaynor@gmail.com> | 2018-05-15 18:12:51 -0400 |
| commit | e564aebd759090c35c374085931f3ada693dab1e (patch) | |
| tree | 3a8a0b065a65f28c5ca49ff3a022a499e4fbf7f8 /src/_cffi_src/build_constant_time.py | |
| parent | 7e8ce14b820cffb7fa03bdba0890b2df95e76a2e (diff) | |
| download | cryptography-e564aebd759090c35c374085931f3ada693dab1e.tar.gz cryptography-e564aebd759090c35c374085931f3ada693dab1e.tar.bz2 cryptography-e564aebd759090c35c374085931f3ada693dab1e.zip | |
Remove ECDSA_sign_setup and *sign_ex bindings. (#4245)
They are unused.
These functions have two purposes. They can be used to pass your own
value of k, or to amoritize the cost of generating k. Messing up k is
catastrophic to ECDSA, so best not to expose that one. ECDSA signing is
also quite fast, so there isn't much point in the latter. (The API comes
from DSA, which is a bit slower.) Moreover, ECDSA_sign is not the same
as ECDSA_sign_setup + ECDSA_sign_ex. OpenSSL has some nonce hardening
features that have to get skipped when doing this.
Diffstat (limited to 'src/_cffi_src/build_constant_time.py')
0 files changed, 0 insertions, 0 deletions