Hi,

There is a problem with the cswift engine:
- in cswift_mod_exp_crt, it expects the length of "dmp1" and "dmq1" to 
be a multiple of 32, which is not always the case, the patch complements 
the datas with '\0' until the length is a multiple of 32.
- in cswift_rand_bytes, it expects "num" to be a multiple of 32, which 
is not always the case, the patch make sure le length passed to 
p_CSwift_SimpleRequest is always a multiple of 32, by optionnaly using 
an intermetiade buffer.

These problems have been notified to Rainbow, which has been able to 
reproduce the problem. The patch has been validated by their support 
service.

Regards,
-- 
Frédéric Giudicelli
[EMAIL PROTECTED]

Tel : +33 (0)1 40 07 47 20
Fax : +33 (0)1 40 07 47 27
deny all - 5, rue Scribe - 75009 Paris - France
www.deny-all.com
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to