On Sun, Jul 31, 2016 at 10:44 AM, Niels Möller <[email protected]> wrote: > [email protected] (Niels Möller) writes: > >> I think it should be easy and reasonable to add code to >> rsa_public_key_prepare and rsa_private_key_prepare to check that the >> modulo is odd. What do you think? It's reasonable to have those >> functions do enough key validation to be able to handle the key without >> crashing. > Done now (or rather, added to the shared helper function _rsa_check_size).
But where is this helper function used? As far as I see it is not used by rsa_pkcs1_verify() or similar functions, and it only applies if rsa_public_key_prepare() is used; otherwise the crash still applies. Gnutls for example doesn't use any of the *prepare functions. regards, Nikos _______________________________________________ nettle-bugs mailing list [email protected] http://lists.lysator.liu.se/mailman/listinfo/nettle-bugs
