add conditions to constant time mask functions

JacobBarthelmeh · JacobBarthelmeh · commit c33035e6a619 · 2025-06-24T13:52:40.000-06:00
diff --git a/wolfcrypt/src/misc.c b/wolfcrypt/src/misc.c
@@ -633,7 +633,13 @@ WC_MISC_STATIC WC_INLINE int ConstantCompare(const byte* a, const byte* b,
 }
 #endif
 
-#ifndef WOLFSSL_NO_CT_OPS
+
+#if defined(WOLFSSL_NO_CT_OPS) && (!defined(NO_RSA) || !defined(WOLFCRYPT_ONLY))
+/* constant time operations with mask are required for RSA and TLS operations */
+#warning constant time operations required unless using NO_RSA & WOLFCRYPT_ONLY
+#endif
+
+#if !defined(WOLFSSL_NO_CT_OPS) || !defined(NO_RSA) || !defined(WOLFCRYPT_ONLY)
 /* Constant time - mask set when a > b. */
 WC_MISC_STATIC WC_INLINE byte ctMaskGT(int a, int b)
 {

Original file line number	Diff line number	Diff line change
`@@ -633,7 +633,13 @@ WC_MISC_STATIC WC_INLINE int ConstantCompare(const byte* a, const byte* b,`
`633`	`633`	`}`
`634`	`634`	`#endif`
`635`	`635`
`636`		`-#ifndef WOLFSSL_NO_CT_OPS`
	`636`	`+`
	`637`	`+#if defined(WOLFSSL_NO_CT_OPS) && (!defined(NO_RSA) \|\| !defined(WOLFCRYPT_ONLY))`
	`638`	`+/* constant time operations with mask are required for RSA and TLS operations */`
	`639`	`+#warning constant time operations required unless using NO_RSA & WOLFCRYPT_ONLY`
	`640`	`+#endif`
	`641`	`+`
	`642`	`+#if !defined(WOLFSSL_NO_CT_OPS) \|\| !defined(NO_RSA) \|\| !defined(WOLFCRYPT_ONLY)`
`637`	`643`	`/* Constant time - mask set when a > b. */`
`638`	`644`	`WC_MISC_STATIC WC_INLINE byte ctMaskGT(int a, int b)`
`639`	`645`	`{`