The following OpenSSL public BIGNUM functions check for the BN_FLG_CONSTTIME: bn_blind.c: BN_BLINDING_new() bn_exp.c: BN_exp : must not be set for input bignums ! BN_mod_exp : SHOULD be set for any one of input bignums (only) if m is odd BN_mod_exp_recp: must NOT be set for input bignums BN_mod_exp_mont: SHOULD be set for any one of input bignums BN_mod_exp_mont_word: must NOT be set for input bignums BN_mod_exp_simple: must NOT bet set for input bignums bn_gcd.c: ! BN_mod_inverse: SHOULD be set for any one of input bignums bn_lib: BN_num_bits ! BN_copy bn_mont.c: BN_MONT_CTX_set bn.h: ! BN_num_bytes: Calls BN_num_bits Relevant files and functions in the files: Helpers.c - BN_dup: - BN_sub: - BN_add_word: - BN_mod_inverse: yes - BN_set_word: - BN_bin2bn: - BN_div: - BN_is_zero: TpmToOsslMath: OsslToTpmBn: - BN_num_bytes: - BN_bn2bin: BigInitialized: - BN_bin2bn: - BN_copy: BnModMult: - BN_mul: - BN_div: BnMult: - BN_mul: BnDiv: - BN_div: BnGcd: - BN_gcd: BnModExp: - BN_mod_exp: YES BnModInverse: - BN_mod_inverse: YES