Gilles Peskine 5d9224e11c RSA PSS: fix first byte check for keys of size 8N+1 ...

For a key of size 8N+1, check that the first byte after applying the
public key operation is 0 (it could have been 1 instead). The code was
incorrectly doing a no-op check instead, which led to invalid
signatures being accepted. Not a security flaw, since you would need the
private key to craft such an invalid signature, but a bug nonetheless.

2017-10-19 15:47:13 +02:00

..

data_files

RSA: Fix buffer overflow in PSS signature verification

2017-10-17 19:30:12 +02:00

scripts

More tests of FALLBACK_SCSV

2017-05-17 14:50:38 +02:00

suites

RSA PSS: fix first byte check for keys of size 8N+1

2017-10-19 15:47:13 +02:00

.gitignore

Move some ignore patterns to subdirectories

2015-01-28 15:33:23 +00:00

CMakeLists.txt

Add tests for the bug IOTSSL-619.

2016-05-18 19:58:40 +01:00

compat.sh

Update default configuration

2016-04-09 00:16:40 +01:00

Descriptions.txt

Add selftest program to the list of tests

2014-04-04 16:33:01 +02:00

Makefile

Adds test_suite_pkcs1_v15 to tests/Makefile

2016-05-18 20:08:16 +01:00

ssl-opt.sh

Remove the check in ssl-opt.sh for MAX_INTERMEDIATE_CA

2017-07-28 13:16:50 +01:00