opentitan
opentitan copied to clipboard
[crypto/rsa] temporarily use constant-time modexp when e != 0x10001
Previously, RSA verify operations returned an invalid argument error when passed a value for the public exponent e other than 65537 (2^16 + 1), because we currently lack a variable-time implementation to perform the modexp operation for other exponents. This PR configures RSA to temporarily use the existing constant-time implementation for other exponents until a variable-time implementation is supported.
This PR allows us to run the NIST CAVP RSA test vectors, which all use e != 65537.
Added issue #21581
Successfully created backport PR for earlgrey_es_sival:
- #21688