The answer to your question is yes, RSA blinding is turned on by default.
To verify that blinding is turned on by default, run this test:
Run the following code after calling RSA_blinding_off(*RSA). Then, comment
out RSA_blinding_off() and run it again. The output from this test verifies
that RSA blinding is on by default.
if (your_rsa_key->blinding == NULL){
 printf("RSA blinding is off.\n");
}
--
View this message in context:
http://openssl.6102.n7.nabble.com/RSA-blinding-active-by-default-tp44768p45057.html
Sent from the OpenSSL - User mailing list archive at Nabble.com.