rsa/rsa_eay.c: implement variant of "Smooth CRT-RSA."
authorAndy Polyakov <appro@openssl.org>
Mon, 13 Aug 2018 18:20:28 +0000 (20:20 +0200)
committerAndy Polyakov <appro@openssl.org>
Tue, 28 Aug 2018 17:35:33 +0000 (19:35 +0200)
commitf9381fd323303316282331a8cced6e030e809794
treec6958b68e1ad27d86689fd0237e9c6e06eb6b4e8
parent387d170b32ceeac450bfa50b81db9db9179dc880
rsa/rsa_eay.c: implement variant of "Smooth CRT-RSA."

In [most common] case of p and q being of same width, it's possible to
replace CRT modulo operations with Montgomery reductions. And those are
even fixed-length Montgomery reductions...

(cherry picked from commit 41bfd5e7c8ac3a0874a94e4d15c006ad5eb48e59)

Resolved conflicts:
crypto/rsa/rsa_eay.c

Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/6942)
crypto/rsa/rsa_eay.c