3 ms·
> I'm surprised to learn that Go did not already check the result of calculations Yeah. As the announcement says, it's coming in 1.6 and we (CloudFlare) backpo
by FiloSottile 11y ago
> I'm surprised to learn that Go did not already check the result of calculations
Yeah. As the announcement says, it's coming in 1.6 and we (CloudFlare) backported it in our public tree, in case anyone else wants to use it: https://github.com/cloudflare/go/commits/go1.5.3-cloudflare1 https://github.com/cloudflare/go/commits/go1.5.3-cloudflare1
- rsc 11y agoThere are tradeoffs here. I believe the reason for the omission originally was concerns along these lines: http://www.openwall.com/lists/oss-security/2014/07/10/5 http://www.openwall.com/lists/oss-security/2014/07/10/5
- JoachimSchipper 11y agoYour link - which is interesting - concerns sanity check on private keys. I agree that such checks need to be implemented very carefully, since they handle highly-sensitive data. However, I was proposing verifying the signature - which involves only the public key and the signed data, neither of which are likely to be all that sensitive. (The situation is more subtle for RSA decryption.)