The branch OpenSSL_1_1_0-stable has been updated
via 84a85b5755befabd450fbb7cc63d5e23a268ddb0 (commit)
from 8efce5badd2f3bdd2d15e4aacd6b04f6ee69cf60 (commit)
- Log -----------------------------------------------------------------
commit 84a85b5755befabd450fbb7cc63d5e23a268ddb0
Author: Matt Caswell <[email protected]>
Date: Wed Oct 18 10:23:33 2017 +0100
Correct value for BN_security_bits()
The function BN_security_bits() uses the values from SP800-57 to assign
security bit values for different FF key sizes. However the value for 192
security bits is wrong. SP800-57 has it as 7680 but the code had it as
7690.
Reviewed-by: Tim Hudson <[email protected]>
Reviewed-by: Rich Salz <[email protected]>
(Merged from https://github.com/openssl/openssl/pull/4546)
(cherry picked from commit c9fe362303fc54ff19bde7511475f28663f7d554)
-----------------------------------------------------------------------
Summary of changes:
crypto/bn/bn_lib.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/crypto/bn/bn_lib.c b/crypto/bn/bn_lib.c
index c2dff7d..d7c5fc3 100644
--- a/crypto/bn/bn_lib.c
+++ b/crypto/bn/bn_lib.c
@@ -897,7 +897,7 @@ int BN_security_bits(int L, int N)
int secbits, bits;
if (L >= 15360)
secbits = 256;
- else if (L >= 7690)
+ else if (L >= 7680)
secbits = 192;
else if (L >= 3072)
secbits = 128;
_____
openssl-commits mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-commits
