Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-09-22 13:01:16 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix(mbedtls): revert to non constant time rsa key gen

Browse Source
This commit is contained in:
Ashish Sharma
2026-07-21 16:24:06 +08:00
parent 844403b5b9
commit 27e5155ce3
2 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
components/mbedtls/Kconfig
View File

@@ -1420,7 +1420,7 @@ menu "mbedTLS"
config MBEDTLS_CONSTANT_TIME_PRIME_GEN
bool "Constant-time prime generation"
default y
default n
help
Use mbedtls' constant-time small-factor test (a
constant-time GCD against the product of all odd primes up
@@ -1437,9 +1437,9 @@ menu "mbedTLS"
If disabled, the variable-time trial division that mbedtls
used before versions 3.6.7/4.1.1 is used instead,
restoring key generation performance. Only consider
disabling this if no untrusted code running on the device
could observe the timing of key generation operations.
restoring key generation performance.
Please see issue: https://github.com/Mbed-TLS/mbedtls/issues/10830
endmenu # Security hardening

2
components/mbedtls/port/include/mbedtls/esp_config.h
View File

@@ -260,7 +260,7 @@
/* mbedtls 4.1.1 made the small-factor test used in prime
* generation constant-time, which slows RSA key generation down roughly
* tenfold and starves the idle task (the computation never yields the CPU).
* The constant-time variant is the default; when it is explicitly disabled,
* The non constant-time variant is the default; when it is disabled,
* fall back to the variable-time trial division from earlier releases. See
* MBEDTLS_MPI_PRIME_SIEVE_VARIABLE_TIME in
* tf-psa-crypto/drivers/builtin/src/bignum.c.