CMAC timings

Kurt Roeckx kurt at roeckx.be
Thu Jun 18 16:45:44 UTC 2020


On Thu, Jun 18, 2020 at 10:41:40AM +0200, Tomas Mraz wrote:
> > I question the default behaviour, I think most people don't need
> > that support.
> 
> Unfortunately that would be an API break that could be very hard to
> discover, so I do not think we can change this even in 3.0.

But I think the old CMAC API didn't support that, and so we can
change the internal calls to use the flag now (if needed). The
EVP_MAC API probably supports this too, and we can consider
changing the default there.


Kurt



More information about the openssl-users mailing list