Blog31.7K views2,493 votes0 replies1,463 following
Constant-time BN_mod_exp and Provider Backends in OpenSSL
OpenSSL provider API makes swapping cryptographic backends trivial, but constant-time guarantees for BN_mod_exp depend on the active backend. This post walks through Montgomery multiplication, blinding, and verification steps for side-channel safety.