> -----Original Message-----
> From: Sucharitha Sarananaga <[email protected]>
> Sent: Friday, October 9, 2026 5:06 PM
> To: [email protected]
> Cc: Akhil Goyal <[email protected]>; [email protected]; Ankur Dwivedi
> <[email protected]>; Anoob Joseph <[email protected]>; Tejasree
> Kondoj <[email protected]>; [email protected]; [email protected];
> [email protected]; Gowrishankar Muthukrishnan
> <[email protected]>; Sucharitha Sarananaga
> <[email protected]>
> Subject: [PATCH] crypto/cnxk: improve RSA private key validation
>
> Add upfront RSA modulus length validation and reject zero-length or
> unsupported modulus sizes. Validate CRT key component pointers and
> lengths, validate private exponent length, and derive the actual CRT
> key size from component lengths instead of relying solely on modulus
> size.
>
> Also round up the half-modulus bound used for CRT parameters so
> odd-length moduli do not incorrectly reject valid factors.
>
> These checks ensure RSA key material fits within CNXK hardware limits,
> prevent invalid parameter acceptance, and avoid potential NULL pointer
> dereferences.
>
> Signed-off-by: Sucharitha Sarananaga <[email protected]>
Applied to dpdk-next-crypto
Thanks.
