3 ms·
The article mentions timing, though it’s important to realize that RSA is resistant to constant time - you can mitigate this with some random work making use of
by olliej 5y ago
The article mentions timing, though it’s important to realize that RSA is resistant to constant time - you can mitigate this with some random work making use of ‘X mod N’ is the same as ‘AXA^-1 mod N’
You also can’t use the same key for signing and encryption.
You have to be sure your primes are actually prime (there have been bugs where ‘primes’ turned out to be composite)
Even if they are prime, some classes of prime are weaker for some reason involving maths I never understood.
I know there are more but my TLS days are mercifully far behind me :)