Transition from ALG_RSA_CRT to ALG_RSA

petrs commented 11 years ago

change in basic RSA objects allocation
change in Algorithm Attributes
algAttrSign, algAttrDec, algAttrAuth must be updated according to type of generated key

petrs commented 11 years ago

DEF_ALG used for specification of preference between CRT and non-CRT RSA

martinpaljak commented 11 years ago

Why should one use ALG_RSA instead of ALG_RSA_CRT ?

petrs commented 11 years ago

ALG_RSA_CRT mode seems to be more vulnerable to fault injection. Bellcore attack was published in 1996 (https://crypto.stanford.edu/~dabo/abstracts/faults.html) able to obtain private key from RSA with CRT when single one single faulty signature can be obtained. Some improvements were proposed (http://risorse.dei.polimi.it/FDTC04/Yen.pdf, http://joye.site88.net/papers/Joy09rsafaults.pdf), but I do not feel comfortable yet - especially because card manufacturers are not providing information about defense used. But if you are aware about any update to this issue, please let me know.

CSSHL / MyPGPid

Transition from ALG_RSA_CRT to ALG_RSA #9