Files
mbedtls/tests/suites
Gilles Peskine b00b0da452 RSA PSS: fix first byte check for keys of size 8N+1
For a key of size 8N+1, check that the first byte after applying the
public key operation is 0 (it could have been 1 instead). The code was
incorrectly doing a no-op check instead, which led to invalid
signatures being accepted. Not a security flaw, since you would need the
private key to craft such an invalid signature, but a bug nonetheless.
2017-10-19 15:23:49 +02:00
..
2015-04-08 13:25:31 +02:00
2015-04-08 13:25:31 +02:00
2015-04-08 13:25:31 +02:00
2015-04-08 13:25:31 +02:00
2015-04-08 13:25:31 +02:00
2015-04-08 13:25:31 +02:00
2015-04-08 13:25:31 +02:00
2015-04-08 13:25:31 +02:00
2015-04-08 13:25:31 +02:00
2015-04-08 13:25:31 +02:00
2015-04-08 13:25:31 +02:00
2015-04-08 13:25:31 +02:00
2015-04-08 13:25:31 +02:00
2015-09-07 12:43:11 +02:00
2015-04-08 13:25:31 +02:00
2015-04-08 13:25:31 +02:00
2015-04-08 13:25:31 +02:00
2015-04-08 13:25:31 +02:00
2015-04-08 13:25:31 +02:00
2015-04-08 13:25:31 +02:00