4 ms·
There are tradeoffs here. I believe the reason for the omission originally was concerns along these lines: http://www.openwall.com/lists/oss-security/2014/07/10
by rsc 11y ago
There are tradeoffs here. I believe the reason for the omission originally was concerns along these lines:
http://www.openwall.com/lists/oss-security/2014/07/10/5 http://www.openwall.com/lists/oss-security/2014/07/10/5
- JoachimSchipper 11y agoYour link - which is interesting - concerns sanity check on private keys. I agree that such checks need to be implemented very carefully, since they handle highly-sensitive data. However, I was proposing verifying the signature - which involves only the public key and the signed data, neither of which are likely to be all that sensitive. (The situation is more subtle for RSA decryption.)