RSA_BLINDING_ON(3)

πŸ“¦ version 4.4.0, in alpine 3.24, arch rolling

✨ NAME ✨

okay so bestie, this page is RSA_BLINDING_ON(3) β€” the manual name is RSA_BLINDING_ON, from the libcrypto library β€” and it's all about RSA_blinding_on and RSA_blinding_off, the functions that protect the RSA operation from timing attacks. πŸ’…


πŸ¦‹ SYNOPSIS πŸ¦‹

It literally says library β€œlibcrypto”, and then you include this:

#include <openssl/rsa.h>

int
RSA_blinding_on(RSA *rsa, BN_CTX *ctx);

void
RSA_blinding_off(RSA *rsa);

🌸 DESCRIPTION 🌸

RSA is vulnerable to timing attacks. Not me being dramatic β€” that's the actual vibe. 😭 In a setup where attackers can measure the time of RSA decryption or signature operations, blinding must be used to protect the RSA operation from that attack. Like, this is not optional, bestie.

  • RSA_blinding_on() β€” turns blinding on for key rsa and generates a random blinding factor. The ctx argument is either NULL or a pre-allocated and initialized BN_CTX. ✨
  • RSA_blinding_off() β€” turns blinding off and frees the memory used for the blinding factor. Cleanup queen. πŸŽ€

πŸ’– RETURN VALUES πŸ’–

RSA_blinding_on() returns 1 on success, and 0 if an error occurred. That's it, that's the whole return-value story. 🫢


🌈 SEE ALSO 🌈


πŸ‘‘ HISTORY πŸ‘‘

RSA_blinding_on() and RSA_blinding_off() first appeared in SSLeay 0.9.0 and have been available since OpenBSD 2.4. iconic longevity, no cap. ⭐


okay that's the whole page, bestie β€” the footer says Debian and June 8, 2025, so bye-bye and stay timing-attack-safe πŸ’œπŸ’…

πŸ“¦ where this page comes from