search

erlef / security-wg

Repo for the Security Working Group
https://erlef.github.io/security-wg/
192 stars 17 forks source link

SSL Handshake Performance #2

Closed max-au closed 2 years ago

max-au commented 4 years ago

Existing OTP implementation suffers from a concurrency issue caused by openSSL RSA timing attack mitigation (blinding mechanism). Solving the problem requires a different approach to passing RSA private keys from OTP crypto module to openSSL NIF counterpart.

max-au commented 2 years ago

With newer openSSL versions blinding no longer causes lock contention.