Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-10-02 11:10:54 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix(mbedtls): revert to non constant time rsa key gen

Browse Source
This commit is contained in:
Ashish Sharma
2026-07-30 13:39:35 +08:00
parent ee2ef95cfe
commit be0df8c3ad
2 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
components/mbedtls/Kconfig
+4 -4
View File
@@ -1423,7 +1423,7 @@ menu "mbedTLS"
config MBEDTLS_CONSTANT_TIME_PRIME_GEN config MBEDTLS_CONSTANT_TIME_PRIME_GEN
bool "Constant-time prime generation" bool "Constant-time prime generation"
default y default n
help help
Use mbedtls' constant-time small-factor test (a Use mbedtls' constant-time small-factor test (a
constant-time GCD against the product of all odd primes up constant-time GCD against the product of all odd primes up
@@ -1440,9 +1440,9 @@ menu "mbedTLS"
If disabled, the variable-time trial division that mbedtls If disabled, the variable-time trial division that mbedtls
used before versions 3.6.7/4.1.1 is used instead, used before versions 3.6.7/4.1.1 is used instead,
restoring key generation performance. Only consider restoring key generation performance.
disabling this if no untrusted code running on the device
could observe the timing of key generation operations. Please see issue: https://github.com/Mbed-TLS/mbedtls/issues/10830
endmenu # Security hardening endmenu # Security hardening
components/mbedtls/port/include/mbedtls/esp_config.h
+1 -1
View File
@@ -261,7 +261,7 @@
/* mbedtls 4.1.1 made the small-factor test used in prime /* mbedtls 4.1.1 made the small-factor test used in prime
* generation constant-time, which slows RSA key generation down roughly * generation constant-time, which slows RSA key generation down roughly
* tenfold and starves the idle task (the computation never yields the CPU). * tenfold and starves the idle task (the computation never yields the CPU).
* The constant-time variant is the default; when it is explicitly disabled, * The non constant-time variant is the default; when it is disabled,
* fall back to the variable-time trial division from earlier releases. See * fall back to the variable-time trial division from earlier releases. See
* MBEDTLS_MPI_PRIME_SIEVE_VARIABLE_TIME in * MBEDTLS_MPI_PRIME_SIEVE_VARIABLE_TIME in
* tf-psa-crypto/drivers/builtin/src/bignum.c. * tf-psa-crypto/drivers/builtin/src/bignum.c.