|
Botan 3.0.0-alpha0
Crypto and TLS for C&
|
| #define BOTAN_AUTO_RNG_HMAC "HMAC(SHA-384)" |
| #define BOTAN_BLINDING_REINIT_INTERVAL 64 |
Normally blinding is performed by choosing a random starting point (plus its inverse, of a form appropriate to the algorithm being blinded), and then choosing new blinding operands by successive squaring of both values. This is much faster than computing a new starting point but introduces some possible corelation
To avoid possible leakage problems in long-running processes, the blinder periodically reinitializes the sequence. This value specifies how often a new sequence should be started.
| #define BOTAN_BLOCK_CIPHER_PAR_MULT 4 |
| #define BOTAN_DEFAULT_BUFFER_SIZE 1024 |
| #define BOTAN_ENTROPY_DEFAULT_SOURCES { "rdseed", "hwrng", "getentropy", "system_rng", "system_stats" } |
| #define BOTAN_ENTROPY_PROC_FS_PATH "/proc" |
| #define BOTAN_MLOCK_ALLOCATOR_MAX_LOCKED_KB 512 |
| #define BOTAN_MP_WORD_BITS 64 |
| #define BOTAN_PBKDF_TUNING_TIME std::chrono::milliseconds(10) |
| #define BOTAN_RNG_AUTO_RESEED_TIMEOUT std::chrono::milliseconds(10) |
| #define BOTAN_RNG_DEFAULT_RESEED_INTERVAL 1024 |
| #define BOTAN_RNG_RESEED_DEFAULT_TIMEOUT std::chrono::milliseconds(50) |
| #define BOTAN_RNG_RESEED_POLL_BITS 256 |
| #define BOTAN_SYSTEM_CERT_BUNDLE "/etc/ssl/certs/ca-certificates.crt" |
| #define BOTAN_TARGET_CPU_DEFAULT_CACHE_LINE_SIZE 32 |
If no way of dynamically determining the cache line size for the system exists, this value is used as the default. Used by the side channel countermeasures rather than for alignment purposes, so it is better to be on the smaller side if the exact value cannot be determined. Typically 32 or 64 bytes on modern CPUs.
1.9.3