CVSROOT: /cvs Module name: src Changes by: t...@cvs.openbsd.org 2023/03/04 14:02:21
Modified files: lib/libcrypto/dsa: dsa_ameth.c Log message: Add dsa_check_key() calls on DSA decoding When decoding a public or a private key, use dsa_check_key() to ensure consistency of the DSA parameters. We do not always have sufficient information to do that, so this is not always possible. This adds new checks and replaces incomplete existing ones. On decoding the private key we will now only calculate the corresponding public key, if the sizes are sensible. This avoids potentially expensive operations. ok beck jsing