You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
openwrt/package
Hauke Mehrtens b19622044d mbedtls: Activate deterministic ECDSA
With deterministic ECDSA the value k needed for the ECDSA signature is
not randomly generated any more, but generated from a hash over the
private key and the message to sign. If the value k used in a ECDSA
signature or the relationship between the two values k used in two
different ECDSA signatures over the same content is know to an attacker
he can derive the private key pretty easily. Using deterministic ECDSA
as defined in the RFC6979 removes this problem by deriving the value k
deterministically from the private key and the content which gets
signed.

The resulting signature is still compatible to signatures generated not
deterministic.

This increases the size of the ipk on mips 24Kc by about 2 KByte.
old:
166.240 libmbedtls_2.11.0-1_mips_24kc.ipk
new:
167.811 libmbedtls_2.11.0-1_mips_24kc.ipk

This does not change the ECDSA performance in a measurable way.

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
6 years ago
..
base-files base-files: add menuconfig option for HOME_URL 6 years ago
boot uboot-kirkwood: fix malformed boot configuration 6 years ago
devel perf: remove linux 4.4 workarounds 6 years ago
firmware firmware: amd64-microcode: update to 20180524 6 years ago
kernel linux: update license tag to use correct SPDX tag 6 years ago
libs mbedtls: Activate deterministic ECDSA 6 years ago
network mbedtls: Update to 2.11.0 6 years ago
system ca-certificates: ca-bundle: add symlink for openssl default setting 6 years ago
utils mbedtls: Update to 2.11.0 6 years ago
Makefile imagebuilder: reuse rootfs preparation from rootfs.mk 6 years ago